Next.js patched two critical unauthenticated remote code execution flaws and a high-severity flaw that could disrupt application availability.
A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said. The risk ...
Two critical Next.js flaws allow unauthenticated remote code execution on Windows-hosted applications using the Image Optimization API to process AVIF images. The first flaw, tracked as CVE-2026-75604 ...
Results that may be inaccessible to you are currently showing.
Hide inaccessible results