#React

Next.js out-of-band update fixes two critical unauthenticated RCE flaws

Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical remote code execution flaws in cache handling and SVG image optimization, plus a denial-of-service bug.

yesterday 07:09 PM