Is Pages Router vulnerable to CVE-2025-55182 (remote code execution) ?

[billnye2]

Summary

Title says it. As far as I know, Pages Router doesn't use React Server Components, so is it still vulnerable to CVE-2025-55182?

This is critical to know.

https://vercel.com/changelog/cve-2025-55182
https://react.dev/blog/2025/12/03/critical-security-vulnerability-in-react-server-components

Additional information

No response

Example

No response

[icyJoseph]

• https://nextjs.org/blog/CVE-2025-66478#affected-nextjs-versions

Next.js 13.x, Next.js 14.x stable, Pages Router applications, and the Edge Runtime are not affected.

[billnye2]

Thanks missed that one

[icyJoseph]

Please don't forget to mark as answered, it is important to echo this information.