
CVE-2025-55182 Detector. Find which of your GitHub repositories are exposed to the critical React/Next.js RCE vulnerability and generate a clean Markdown report.
This Python script is designed to scan all your public and private GitHub repositories for dependencies that are potentially vulnerable to CVE-2025-55182 (a critical Remote Code Execution affecting specific versions of React Server Components and Next.js).
The script authenticates using a Personal Access Token (PAT), iterates through your repositories, checks the package.json file for vulnerable major versions, and generates a clean Markdown report.
Python: Ensure you have Python (3.6 or newer) installed on your system.
Dependencies: You need the requests and packaging libraries.
pip install requests packaging
Save the provided Python code as scan.py.
IMPORTANT: Do not share your token with anyone. The script requires a PAT to access your private repositories.
CVE-2025-55182-Scan).repo (Full control of private repositories). This is necessary to read the contents of package.json in all your repos.Execute the script from your terminal:
python scan.py