CVE-2025-29927

Advisory

Lmnr updates Next.js to 15.2.3 to patch CVE-2025-29927.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* fe-agent-manager by olzhik11 in https://github.com/lmnr-ai/lmnr/pull/434
* initial migrations for agents, small migration for labels by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/438
* Agent manager by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/436
* set clickhouse url and in compose by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/441
* Fixes to clickhouse URL, agent_manager client by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/442
* agent v0 by skull8888888 in https://github.com/lmnr-ai/lmnr/pull/444
* fix members per workspace by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/445
* export with index + no dep on semantic search and code exec by skull8888888 in https://github.com/lmnr-ai/lmnr/pull/446
* remove directory created accidentaly by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/447
* Feat/agent manager by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/448
* redirect by skull8888888 in https://github.com/lmnr-ai/lmnr/pull/449
* fix(security): update Next.js to 15.2.3 to patch CVE-2025-29927 by iboughtbed in https://github.com/lmnr-ai/lmnr/pull/451
* fix: add padding by skull8888888 in https://github.com/lmnr-ai/lmnr/pull/452
* add steps limits by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/455
* tiny ui changes by skull8888888 in https://github.com/lmnr-ai/lmnr/pull/456
* control by skull8888888 in https://github.com/lmnr-ai/lmnr/pull/457
* add more logging in app-server startup by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/443
* pass raw api key value to the agent by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/460
* Python agent manager by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/461
* squash agent-manager migrations (462) by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/463
* fix timezone in browser sessions by skull8888888 in https://github.com/lmnr-ai/lmnr/pull/465
* update deps across services by dinmukhamedm in https://github.com/lmnr-ai/lmnr/pull/466

New Contributors
* iboughtbed made their first contribution in https://github.com/lmnr-ai/lmnr/pull/451

**Full Changelog**: https://github.com/lmnr-ai/lmnr/compare/v0.1.3-alpha.8...v0.1.3-alpha.9

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29927