Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
@next/third-parties may allow unauthorized code execution
published 17 days ago
Summary
The @next/third-parties component contains two security weaknesses that could let an attacker run their own code on your system. This could lead to data loss or further compromise. Install the updated version (14.2.35-tuxcare.5) as soon as possible to fix the issue.
What to do
- Update next @next/third-parties to version 14.2.35-tuxcare.5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | next | @next/third-parties |
>= 14.2.35-tuxcare.0, < 14.2.35-tuxcare.5 Fix: upgrade to 14.2.35-tuxcare.5
|
Original advisory text
TuxCare security update for @next/third-parties (2 CVEs)
TuxCare rebuilt @next/third-parties to address 2 CVEs. Fixed in 14.2.35-tuxcare.5.
Timeline
Published18 Oct 2026
Updated2 Nov 2026
First seen18 Oct 2026
Sources
CLSA-2026-1792338233 · OSV
Track software like this
Free during beta