Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application. Initiating a fetch request to a third-party within Middleware will send the x-middleware-subrequest-id to that third party. This vulnerability is fixed in 12.3.6, 13.5.10, 14.2.26, and 15.2.4.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js     validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this     subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js     application. Initiating a fetch request to a third-party within Middleware will send the x-middleware-     subrequest-id to that third party. This vulnerability is fixed in 12.3.6, 13.5.10, 14.2.26, and 15.2.4.
    (CVE-2025-30218)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js
    validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this
    subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js
    application. Initiating a fetch request to a third-party within Middleware will send the x-middleware-
    subrequest-id to that third party. This vulnerability is fixed in 12.3.6, 13.5.10, 14.2.26, and 15.2.4.
    (CVE-2025-30218)

ID	Name	Product	Family	Type	Severity
260220	Linux Distros Unpatched Vulnerability : CVE-2025-30218	Nessus	Misc.	Local	high
423641	SCA: security update for next (GHSA-223j-4rm8-mrmf)	Tenable Cloud Security	SCA Checks	Local	medium
423641	SCA: security update for next (GHSA-223j-4rm8-mrmf)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2025-30218

medium

Tenable Plugins

high

medium

medium