Appreciate that v0 called out the Next.js CVE. That was helpful! I’ll upgrade my repo.
I wanted to flag that the yellow notice in the preview has the “Fix with v0, it is free” button, but that button is not clickable. I click it and nothing happens. I tried to just say manually in the prompt, “I’m on Next.js 15.2.4, there is a known CVE and I want to upgrade to the latest security patch.” Here was the response:
Based on my research, Next.js 15.2.4 actually includes the security patch for CVE-2025-29927. However, let me search for the absolute latest version to ensure you have the most recent release:
Checked latest Next.js versionGood news! According to the latest information, Next.js 15.2.4 actually contains the security patch for the CVE-2025-29927 vulnerability. However, if you’d like to upgrade to the absolute latest version (which appears to be 15.5 or later), you’ll need to unlock the package.json file first.So .. clearly this is going to the LLM’s base knowledge of CVEs and the version of Next.js, and not pulling in the latest CVE context.
