Next.js out-of-band update fixes two critical unauthenticated RCE flaws
Vercel released Next.js 16.4.1 and 15.5.28 to fix two critical remote code execution flaws in cache handling and SVG image optimization, plus a denial-of-service bug.
#sharp
Cybersecurity news about “sharp”.