Uploaded March 2025 | Updated September 2026, 2 weeks ago

---

Get up to 67% off VPS at Hostinger. Use code FIRESHIP for an extra discount at hostinger.com/fireship

Technical breakdown of the critical vulnerability CVE-2025-29927 that affects the React JavaScript framework Next.js.

#cybersecurity #programming #thecodereport

💬 Chat with Me on Discord

discord.gg/fireship

🔗 Resources

CVE-2025-29927 Deep Dive zhero-web-sec.github.io/research-and-things/nextjs-and-the-corrupt-middleware
Firefox Zero Day youtu.be/2RmUMmUj3u8
Software bug iceberg youtu.be/Iq_r7IcNmUk?si=a-fggLH6vYHi4f1q

🔥 Get More Content - Upgrade to PRO

Upgrade at fireship.io/pro
Use code YT25 for 25% off PRO access

🎨 My Editor Settings

- Atom One Dark
- vscode-icons
- Fira Code Font

🔖 Topics Covered

- Drawbacks of using Next.js
- Next.js security flaw in middleware explained
- Cybersecurity issues for web developers
- Recent trends in web development