Next.js Server Action Prototype Pollution (CVE-2025-55182)

Aaron Mog@AaronMogS2S

•updated Dec 4, 2025•49•7•1,612

Detects attempts to exploit CVE-2025-55182 (Next.js/React) via Server Actions. Target is identified by the 'Next-Action' header or 'RSC' markers, combined with JSON prototype pollution vectors in the body.