News Vulnerabilities & Zero-Days
Next.js fixes two critical unauthenticated RCE flaws in out-of-band update
Next.js 16.4.1 and 15.5.28 fix two critical unauthenticated remote code execution flaws, one in use cache functions and one in SVG image optimization, plus a high-severity denial of service in Server Actions. There is no workaround for two of the three.
Jaydeep Bhatt