Skip to content
OpenAdvisories
Medium · 6.3 CVE-2025-23027 EUVD-2025-3080

BASEHUB_TOKEN commited in next-forge

Published Jan 13, 2025 · Updated Jan 13, 2025 · Assigned by GitHub_M

Description

next-forge is a Next.js project boilerplate for modern web application. The BASEHUB_TOKEN commited in apps/web/.env.example. Users should avoid use of this token and should remove any access it may have in their systems.

Affected products

VendorProductAffectedFixed
haydenbleasel next-forge < 3.0.11 —

References