{"id":"ROOT-APP-NPM-CVE-2026-64649","summary":"CVE-2026-64649 in next - Patched by Root","details":"Root has patched CVE-2026-64649 in the next package for Root:npm. Multiple fixed versions available.","modified":"2026-09-21T13:15:05.089943218Z","published":"2026-09-21T12:03:09Z","upstream":["CVE-2026-64649"],"database_specific":{"distro":"npm","distro_version":"","severity":"HIGH","source":"Root"},"affected":[{"package":{"name":"next","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-aikido.5"},{"fixed":"14.2.5-aikido.8"},{"fixed":"14.2.33-aikido.2"},{"fixed":"14.2.32-aikido.4"},{"fixed":"14.2.35-aikido.9"},{"fixed":"14.2.30-aikido.7"},{"fixed":"14.2.26-aikido.6"},{"fixed":"14.2.26-aikido.4"},{"fixed":"14.2.30-aikido.10"},{"fixed":"14.2.15-aikido.2"},{"fixed":"14.2.10-aikido.3"},{"fixed":"14.2.13-aikido.3"},{"fixed":"14.2.3-aikido.1"},{"fixed":"14.2.15-aikido.4"},{"fixed":"14.1.3-aikido.2"},{"fixed":"14.2.24-aikido.2"},{"fixed":"14.2.25-aikido.2"},{"fixed":"14.2.18-aikido.2"},{"fixed":"14.2.15-aikido.3"},{"fixed":"14.2.13-aikido.1"},{"fixed":"14.2.32-aikido.1"},{"fixed":"14.2.3-aikido.5"},{"fixed":"14.2.0-aikido.2"},{"fixed":"14.2.5-aikido.9"},{"fixed":"14.2.5-aikido.10"},{"fixed":"14.2.2-aikido.7"},{"fixed":"14.2.33-aikido.1"},{"fixed":"14.1.3-aikido.5"},{"fixed":"14.2.29-aikido.1"},{"fixed":"14.2.29-aikido.5"},{"fixed":"14.2.31-aikido.2"},{"fixed":"14.2.18-aikido.1"},{"fixed":"14.2.10-aikido.4"},{"fixed":"14.2.13-aikido.4"},{"fixed":"14.2.10-aikido.2"},{"fixed":"14.2.18-aikido.6"},{"fixed":"14.2.21-aikido.6"},{"fixed":"14.2.16-aikido.6"},{"fixed":"14.1.4-aikido.5"},{"fixed":"14.2.25-aikido.1"},{"fixed":"14.2.0-aikido.6"},{"fixed":"14.2.31-aikido.5"},{"fixed":"14.2.0-aikido.5"},{"fixed":"14.2.2-aikido.9"},{"fixed":"14.2.30-aikido.8"},{"fixed":"14.2.32-aikido.5"},{"fixed":"14.2.33-aikido.3"},{"fixed":"14.2.5-aikido.2"},{"fixed":"14.2.5-aikido.3"},{"fixed":"14.2.3-aikido.3"},{"fixed":"14.1.3-aikido.6"},{"fixed":"14.2.5-aikido.4"},{"fixed":"14.2.30-aikido.3"},{"fixed":"14.2.13-aikido.2"},{"fixed":"14.2.5-aikido.6"},{"fixed":"14.2.21-aikido.4"},{"fixed":"14.1.4-aikido.7"},{"fixed":"14.2.21-aikido.2"},{"fixed":"14.2.16-aikido.2"},{"fixed":"14.2.16-aikido.4"},{"fixed":"14.2.35-aikido.5"},{"fixed":"14.2.30-aikido.4"},{"fixed":"14.2.33-aikido.4"},{"fixed":"14.2.26-aikido.3"},{"fixed":"14.2.30-aikido.9"},{"fixed":"15.5.19-aikido.3"},{"fixed":"15.5.10-aikido.4"},{"fixed":"14.1.4-aikido.8"},{"fixed":"14.2.35-aikido.3"},{"fixed":"14.2.32-aikido.6"},{"fixed":"16.2.9-aikido.5"},{"fixed":"14.2.35-aikido.6"},{"fixed":"14.1.3-aikido.7"},{"fixed":"14.2.16-aikido.5"},{"fixed":"14.2.21-aikido.5"},{"fixed":"14.2.5-aikido.7"},{"fixed":"14.2.3-aikido.4"},{"fixed":"14.2.2-aikido.8"},{"fixed":"14.2.15-aikido.5"},{"fixed":"14.2.30-aikido.5"},{"fixed":"14.2.3-aikido.2"},{"fixed":"15.5.10-aikido.5"},{"fixed":"14.2.28-aikido.5"},{"fixed":"14.2.32-aikido.2"},{"fixed":"14.1.4-aikido.9"},{"fixed":"14.1.3-aikido.1"},{"fixed":"14.2.32-aikido.7"},{"fixed":"14.2.15-aikido.6"},{"fixed":"14.1.3-aikido.8"},{"fixed":"14.2.32-aikido.8"},{"fixed":"14.2.29-aikido.4"},{"fixed":"16.2.9-aikido.4"},{"fixed":"14.2.35-aikido.2"},{"fixed":"14.2.33-aikido.5"},{"fixed":"14.2.26-aikido.5"},{"fixed":"15.5.10-aikido.6"},{"fixed":"14.2.26-aikido.2"},{"fixed":"14.2.28-aikido.3"},{"fixed":"14.2.31-aikido.3"},{"fixed":"14.1.4-aikido.6"},{"fixed":"14.2.35-aikido.7"},{"fixed":"14.2.18-aikido.3"},{"fixed":"14.2.16-aikido.3"},{"fixed":"14.2.18-aikido.4"},{"fixed":"15.5.19-aikido.2"},{"fixed":"14.2.0-aikido.3"},{"fixed":"14.2.31-aikido.4"},{"fixed":"14.2.29-aikido.2"},{"fixed":"14.2.0-aikido.1"},{"fixed":"14.2.21-aikido.1"},{"fixed":"14.2.16-aikido.1"},{"fixed":"16.2.9-aikido.1"},{"fixed":"15.5.19-aikido.1"},{"fixed":"15.5.15-aikido.4"},{"fixed":"15.5.18-aikido.1"},{"fixed":"16.1.6-aikido.7"},{"fixed":"16.1.7-aikido.3"},{"fixed":"14.1.3-aikido.3"},{"fixed":"14.2.21-aikido.3"},{"fixed":"14.2.32-aikido.3"},{"fixed":"14.2.29-aikido.3"},{"fixed":"14.1.3-aikido.4"},{"fixed":"14.2.0-aikido.4"},{"fixed":"14.2.30-aikido.6"},{"fixed":"14.2.28-aikido.4"},{"fixed":"14.2.33-aikido.6"},{"fixed":"14.2.35-aikido.8"},{"fixed":"16.2.5-aikido.2"},{"fixed":"16.2.9-aikido.2"},{"fixed":"14.2.35-aikido.4"},{"fixed":"16.2.9-aikido.3"},{"fixed":"16.1.6-aikido.8"},{"fixed":"14.2.18-aikido.5"},{"fixed":"15.5.21-aikido.1"},{"fixed":"16.2.11-aikido.1"}]}],"database_specific":{"root_patched":true,"total_fixed_versions":135,"upstream_version":"14.2.0","all_fixed_versions":["14.2.5-aikido.5","14.2.5-aikido.8","14.2.33-aikido.2","14.2.32-aikido.4","14.2.35-aikido.9","14.2.30-aikido.7","14.2.26-aikido.6","14.2.26-aikido.4","14.2.30-aikido.10","14.2.15-aikido.2","14.2.10-aikido.3","14.2.13-aikido.3","14.2.3-aikido.1","14.2.15-aikido.4","14.1.3-aikido.2","14.2.24-aikido.2","14.2.25-aikido.2","14.2.18-aikido.2","14.2.15-aikido.3","14.2.13-aikido.1","14.2.32-aikido.1","14.2.3-aikido.5","14.2.0-aikido.2","14.2.5-aikido.9","14.2.5-aikido.10","14.2.2-aikido.7","14.2.33-aikido.1","14.1.3-aikido.5","14.2.29-aikido.1","14.2.29-aikido.5","14.2.31-aikido.2","14.2.18-aikido.1","14.2.10-aikido.4","14.2.13-aikido.4","14.2.10-aikido.2","14.2.18-aikido.6","14.2.21-aikido.6","14.2.16-aikido.6","14.1.4-aikido.5","14.2.25-aikido.1","14.2.0-aikido.6","14.2.31-aikido.5","14.2.0-aikido.5","14.2.2-aikido.9","14.2.30-aikido.8","14.2.32-aikido.5","14.2.33-aikido.3","14.2.5-aikido.2","14.2.5-aikido.3","14.2.3-aikido.3","14.1.3-aikido.6","14.2.5-aikido.4","14.2.30-aikido.3","14.2.13-aikido.2","14.2.5-aikido.6","14.2.21-aikido.4","14.1.4-aikido.7","14.2.21-aikido.2","14.2.16-aikido.2","14.2.16-aikido.4","14.2.35-aikido.5","14.2.30-aikido.4","14.2.33-aikido.4","14.2.26-aikido.3","14.2.30-aikido.9","15.5.19-aikido.3","15.5.10-aikido.4","14.1.4-aikido.8","14.2.35-aikido.3","14.2.32-aikido.6","16.2.9-aikido.5","14.2.35-aikido.6","14.1.3-aikido.7","14.2.16-aikido.5","14.2.21-aikido.5","14.2.5-aikido.7","14.2.3-aikido.4","14.2.2-aikido.8","14.2.15-aikido.5","14.2.30-aikido.5","14.2.3-aikido.2","15.5.10-aikido.5","14.2.28-aikido.5","14.2.32-aikido.2","14.1.4-aikido.9","14.1.3-aikido.1","14.2.32-aikido.7","14.2.15-aikido.6","14.1.3-aikido.8","14.2.32-aikido.8","14.2.29-aikido.4","16.2.9-aikido.4","14.2.35-aikido.2","14.2.33-aikido.5","14.2.26-aikido.5","15.5.10-aikido.6","14.2.26-aikido.2","14.2.28-aikido.3","14.2.31-aikido.3","14.1.4-aikido.6","14.2.35-aikido.7","14.2.18-aikido.3","14.2.16-aikido.3","14.2.18-aikido.4","15.5.19-aikido.2","14.2.0-aikido.3","14.2.31-aikido.4","14.2.29-aikido.2","14.2.0-aikido.1","14.2.21-aikido.1","14.2.16-aikido.1","16.2.9-aikido.1","15.5.19-aikido.1","15.5.15-aikido.4","15.5.18-aikido.1","16.1.6-aikido.7","16.1.7-aikido.3","14.1.3-aikido.3","14.2.21-aikido.3","14.2.32-aikido.3","14.2.29-aikido.3","14.1.3-aikido.4","14.2.0-aikido.4","14.2.30-aikido.6","14.2.28-aikido.4","14.2.33-aikido.6","14.2.35-aikido.8","16.2.5-aikido.2","16.2.9-aikido.2","14.2.35-aikido.4","16.2.9-aikido.3","16.1.6-aikido.8","14.2.18-aikido.5","15.5.21-aikido.1","16.2.11-aikido.1"],"root_patch_version":"aikido.6","source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-64649.json"}},{"package":{"name":"@rootio/next","ecosystem":"Root:npm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.2.5-root.io.5"},{"fixed":"14.2.5-root.io.8"},{"fixed":"14.2.33-root.io.2"},{"fixed":"14.2.32-root.io.4"},{"fixed":"14.2.35-root.io.9"},{"fixed":"14.2.30-root.io.7"},{"fixed":"14.2.26-root.io.6"},{"fixed":"14.2.26-root.io.4"},{"fixed":"14.2.30-root.io.10"},{"fixed":"14.2.15-root.io.2"},{"fixed":"14.2.10-root.io.3"},{"fixed":"14.2.13-root.io.3"},{"fixed":"14.2.3-root.io.1"},{"fixed":"14.2.15-root.io.4"},{"fixed":"14.1.3-root.io.2"},{"fixed":"14.2.25-root.io.2"},{"fixed":"14.2.24-root.io.2"},{"fixed":"14.2.18-root.io.2"},{"fixed":"14.2.15-root.io.3"},{"fixed":"14.2.13-root.io.1"},{"fixed":"14.2.32-root.io.1"},{"fixed":"14.2.3-root.io.5"},{"fixed":"14.2.0-root.io.2"},{"fixed":"14.2.5-root.io.9"},{"fixed":"14.2.5-root.io.10"},{"fixed":"14.2.2-root.io.7"},{"fixed":"14.2.33-root.io.1"},{"fixed":"14.1.3-root.io.5"},{"fixed":"14.2.29-root.io.1"},{"fixed":"14.2.29-root.io.5"},{"fixed":"14.2.31-root.io.2"},{"fixed":"14.2.18-root.io.1"},{"fixed":"14.2.10-root.io.4"},{"fixed":"14.2.13-root.io.4"},{"fixed":"14.2.10-root.io.2"},{"fixed":"14.2.18-root.io.6"},{"fixed":"14.2.21-root.io.6"},{"fixed":"14.2.16-root.io.6"},{"fixed":"14.1.4-root.io.5"},{"fixed":"14.2.25-root.io.1"},{"fixed":"14.2.0-root.io.6"},{"fixed":"14.2.31-root.io.5"},{"fixed":"14.2.0-root.io.5"},{"fixed":"14.2.2-root.io.9"},{"fixed":"14.2.30-root.io.8"},{"fixed":"14.2.32-root.io.5"},{"fixed":"14.2.33-root.io.3"},{"fixed":"14.2.5-root.io.2"},{"fixed":"14.2.5-root.io.3"},{"fixed":"14.2.3-root.io.3"},{"fixed":"14.1.3-root.io.6"},{"fixed":"14.2.5-root.io.4"},{"fixed":"14.2.30-root.io.3"},{"fixed":"14.2.13-root.io.2"},{"fixed":"14.2.5-root.io.6"},{"fixed":"14.2.21-root.io.4"},{"fixed":"14.1.4-root.io.7"},{"fixed":"14.2.21-root.io.2"},{"fixed":"14.2.16-root.io.2"},{"fixed":"14.2.16-root.io.4"},{"fixed":"14.2.35-root.io.5"},{"fixed":"14.2.30-root.io.4"},{"fixed":"14.2.33-root.io.4"},{"fixed":"14.2.26-root.io.3"},{"fixed":"14.2.30-root.io.9"},{"fixed":"15.5.19-root.io.3"},{"fixed":"15.5.10-root.io.4"},{"fixed":"14.1.4-root.io.8"},{"fixed":"14.2.35-root.io.3"},{"fixed":"14.2.32-root.io.6"},{"fixed":"16.2.9-root.io.5"},{"fixed":"14.2.35-root.io.6"},{"fixed":"14.1.3-root.io.7"},{"fixed":"14.2.16-root.io.5"},{"fixed":"14.2.21-root.io.5"},{"fixed":"14.2.5-root.io.7"},{"fixed":"14.2.3-root.io.4"},{"fixed":"14.2.2-root.io.8"},{"fixed":"14.2.15-root.io.5"},{"fixed":"14.2.30-root.io.5"},{"fixed":"14.2.3-root.io.2"},{"fixed":"15.5.10-root.io.5"},{"fixed":"14.2.28-root.io.5"},{"fixed":"14.2.32-root.io.2"},{"fixed":"14.1.4-root.io.9"},{"fixed":"14.1.3-root.io.1"},{"fixed":"14.2.32-root.io.7"},{"fixed":"14.2.15-root.io.6"},{"fixed":"14.1.3-root.io.8"},{"fixed":"14.2.32-root.io.8"},{"fixed":"14.2.29-root.io.4"},{"fixed":"16.2.9-root.io.4"},{"fixed":"14.2.33-root.io.5"},{"fixed":"14.2.35-root.io.2"},{"fixed":"14.2.26-root.io.5"},{"fixed":"15.5.10-root.io.6"},{"fixed":"14.2.26-root.io.2"},{"fixed":"14.2.28-root.io.3"},{"fixed":"14.2.31-root.io.3"},{"fixed":"14.2.35-root.io.7"},{"fixed":"14.1.4-root.io.6"},{"fixed":"14.2.18-root.io.3"},{"fixed":"14.2.16-root.io.3"},{"fixed":"14.2.18-root.io.4"},{"fixed":"15.5.19-root.io.2"},{"fixed":"14.2.0-root.io.3"},{"fixed":"14.2.31-root.io.4"},{"fixed":"14.2.29-root.io.2"},{"fixed":"14.2.0-root.io.1"},{"fixed":"14.2.21-root.io.1"},{"fixed":"14.1.3-root.io.3"},{"fixed":"14.2.16-root.io.1"},{"fixed":"16.2.9-root.io.1"},{"fixed":"15.5.19-root.io.1"},{"fixed":"15.5.15-root.io.4"},{"fixed":"15.5.18-root.io.1"},{"fixed":"16.1.6-root.io.7"},{"fixed":"16.1.7-root.io.3"},{"fixed":"14.2.21-root.io.3"},{"fixed":"14.2.32-root.io.3"},{"fixed":"14.2.29-root.io.3"},{"fixed":"14.1.3-root.io.4"},{"fixed":"14.2.0-root.io.4"},{"fixed":"14.2.30-root.io.6"},{"fixed":"14.2.33-root.io.6"},{"fixed":"14.2.28-root.io.4"},{"fixed":"14.2.35-root.io.8"},{"fixed":"16.2.5-root.io.2"},{"fixed":"16.2.9-root.io.2"},{"fixed":"14.2.35-root.io.4"},{"fixed":"16.2.9-root.io.3"},{"fixed":"16.1.6-root.io.8"},{"fixed":"14.2.18-root.io.5"},{"fixed":"15.5.21-root.io.1"},{"fixed":"16.2.11-root.io.1"}]}],"database_specific":{"upstream_version":"14.2.0","source":"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-64649.json","all_fixed_versions":["14.2.5-root.io.5","14.2.5-root.io.8","14.2.33-root.io.2","14.2.32-root.io.4","14.2.35-root.io.9","14.2.30-root.io.7","14.2.26-root.io.6","14.2.26-root.io.4","14.2.30-root.io.10","14.2.15-root.io.2","14.2.10-root.io.3","14.2.13-root.io.3","14.2.3-root.io.1","14.2.15-root.io.4","14.1.3-root.io.2","14.2.25-root.io.2","14.2.24-root.io.2","14.2.18-root.io.2","14.2.15-root.io.3","14.2.13-root.io.1","14.2.32-root.io.1","14.2.3-root.io.5","14.2.0-root.io.2","14.2.5-root.io.9","14.2.5-root.io.10","14.2.2-root.io.7","14.2.33-root.io.1","14.1.3-root.io.5","14.2.29-root.io.1","14.2.29-root.io.5","14.2.31-root.io.2","14.2.18-root.io.1","14.2.10-root.io.4","14.2.13-root.io.4","14.2.10-root.io.2","14.2.18-root.io.6","14.2.21-root.io.6","14.2.16-root.io.6","14.1.4-root.io.5","14.2.25-root.io.1","14.2.0-root.io.6","14.2.31-root.io.5","14.2.0-root.io.5","14.2.2-root.io.9","14.2.30-root.io.8","14.2.32-root.io.5","14.2.33-root.io.3","14.2.5-root.io.2","14.2.5-root.io.3","14.2.3-root.io.3","14.1.3-root.io.6","14.2.5-root.io.4","14.2.30-root.io.3","14.2.13-root.io.2","14.2.5-root.io.6","14.2.21-root.io.4","14.1.4-root.io.7","14.2.21-root.io.2","14.2.16-root.io.2","14.2.16-root.io.4","14.2.35-root.io.5","14.2.30-root.io.4","14.2.33-root.io.4","14.2.26-root.io.3","14.2.30-root.io.9","15.5.19-root.io.3","15.5.10-root.io.4","14.1.4-root.io.8","14.2.35-root.io.3","14.2.32-root.io.6","16.2.9-root.io.5","14.2.35-root.io.6","14.1.3-root.io.7","14.2.16-root.io.5","14.2.21-root.io.5","14.2.5-root.io.7","14.2.3-root.io.4","14.2.2-root.io.8","14.2.15-root.io.5","14.2.30-root.io.5","14.2.3-root.io.2","15.5.10-root.io.5","14.2.28-root.io.5","14.2.32-root.io.2","14.1.4-root.io.9","14.1.3-root.io.1","14.2.32-root.io.7","14.2.15-root.io.6","14.1.3-root.io.8","14.2.32-root.io.8","14.2.29-root.io.4","16.2.9-root.io.4","14.2.33-root.io.5","14.2.35-root.io.2","14.2.26-root.io.5","15.5.10-root.io.6","14.2.26-root.io.2","14.2.28-root.io.3","14.2.31-root.io.3","14.2.35-root.io.7","14.1.4-root.io.6","14.2.18-root.io.3","14.2.16-root.io.3","14.2.18-root.io.4","15.5.19-root.io.2","14.2.0-root.io.3","14.2.31-root.io.4","14.2.29-root.io.2","14.2.0-root.io.1","14.2.21-root.io.1","14.1.3-root.io.3","14.2.16-root.io.1","16.2.9-root.io.1","15.5.19-root.io.1","15.5.15-root.io.4","15.5.18-root.io.1","16.1.6-root.io.7","16.1.7-root.io.3","14.2.21-root.io.3","14.2.32-root.io.3","14.2.29-root.io.3","14.1.3-root.io.4","14.2.0-root.io.4","14.2.30-root.io.6","14.2.33-root.io.6","14.2.28-root.io.4","14.2.35-root.io.8","16.2.5-root.io.2","16.2.9-root.io.2","14.2.35-root.io.4","16.2.9-root.io.3","16.1.6-root.io.8","14.2.18-root.io.5","15.5.21-root.io.1","16.2.11-root.io.1"],"root_patch_version":"root.io.6","root_patched":true,"total_fixed_versions":135}}],"schema_version":"1.9.0"}