Medium severityOSV Advisory· Published Jan 13, 2025· Updated Apr 15, 2026

CVE-2025-23027

Description

next-forge is a Next.js project boilerplate for modern web application. The BASEHUB_TOKEN commited in apps/web/.env.example. Users should avoid use of this token and should remove any access it may have in their systems.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Vercel/Next ForgeOSV
Range: v1.0.0, v1.1.0, v1.1.1, …

Patches

Vulnerability mechanics

References

github.com/haydenbleasel/next-forge/commit/239a98f2c308a51d626ae0613102917f82603c1cnvd
github.com/haydenbleasel/next-forge/security/advisories/GHSA-wppx-qmqh-9h33nvd

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000