Multiple vulnerabilities in Next.js 13.5.7

[migaspar]

Our monitoring system reports three CVEs for the currently used Next.js version:
Next.js Authorization Bypass Vulnerability (CVE-2025-29927 and CVE-2024-51479) and Next.js DoS Vulnerability (CVE-2024-47831)
Can you update to an unaffected version please?

[heisbrot]

Hey @migaspar,

These vulnerabilities do not affect the current dashboard. We are not using the Next.js middleware or image optimization.
It still makes sense to upgrade the version, so I have created a PR for it.

[migaspar]

Thank you! When can we expect a new version?

[heisbrot]

Hey @migaspar,

probably either this or next week. I'll let you know once it's released 👍

[heisbrot]

Updated in Dashboard v2.12.0