Next.js maintainers have released an out-of-band security update addressing two critical remote code execution vulnerabilities and a high-severity denial-of-service flaw.
Next.js ImageResponse flaw can lead to server code execution when attacker-controlled values reach generated SVG.
Two critical Next.js flaws allow unauthenticated remote code execution on Windows-hosted applications using the Image Optimization API to process AVIF images. The first flaw, tracked as CVE-2026-75604 ...
A coordinated campaign targeting software developers with job-themed lures is using malicious repositories posing as legitimate Next.js projects and technical assessment materials, including ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results