Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
nextjs-security-update — Batch upgrade all your Next.js apps to patched versions - fight back against CVE-2025-55183/55184/67779 | Kitploit
Tools/GitHubGitHub/williavs/nextjs-security-update
Vulnerability ScannersWeb SecurityCloud SecurityDevSecOpsSupply Chain Security
GitHubwilliavs/nextjs-security-update

nextjs-security-update

Batch upgrade all your Next.js apps to patched versions - fight back against CVE-2025-55183/55184/67779

View Repository
849 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

nextjs-security-update

There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts.

Uses the official Vercel fix tool under the hood.

What happened

Dec 11, 2025: Next.js disclosed multiple critical vulnerabilities affecting React Server Components with App Router:

  • CVE-2025-66478 (RCE)
  • CVE-2025-55183 (Source Code Exposure)
  • CVE-2025-55184 (DoS)
  • CVE-2025-67779 (Complete DoS Fix)

https://nextjs.org/blog/cve-2025-55183-and-cve-2025-55184

What this does

  1. Discovers all your GitHub accounts (personal + orgs)
  2. Lets you pick which ones to scan
  3. Finds every Next.js repo
  4. Runs the official Vercel fix tool on each (handles monorepos, React RSC packages, lockfiles)
  5. Commits locally (you push when ready)

Usage

root@kitploit:~
curl -O https://raw.githubusercontent.com/williavs/nextjs-security-update/main/nextjs-security-update.sh
chmod +x nextjs-security-update.sh
./nextjs-security-update.sh

Or specify accounts directly:

root@kitploit:~
./nextjs-security-update.sh myusername myorg

Options

root@kitploit:~
DRY_RUN=true ./nextjs-security-update.sh    # See what would change
AUTO_PUSH=true ./nextjs-security-update.sh  # Push automatically

Requirements

  • gh (GitHub CLI) - authenticated
  • node / npx
  • git

After running

Push all changes:

root@kitploit:~
cd ~/nextjs-security-updates
for d in */; do (cd "$d" && git push && echo "Pushed $d"); done

Then redeploy your apps.

Download Tool