Next.js patched two critical unauthenticated remote code execution flaws and a high-severity flaw that could disrupt ...
The tool's HTML preview mechanism had a flaw allowing malicious JavaScript to access local files and exfiltrate cloud ...
A critical Next.js flaw could allow remote code execution via the Node.js ImageResponse implementation in next/og.