Nextjs

4 posts tagged with “Nextjs”

BREAKING: Next.js image optimizer SSRF and cache poisons in September 2026 release
cvenextjsssrf

BREAKING: Next.js image optimizer SSRF and cache poisons in September 2026 release

How to fix CVE-2026-94483: upgrade next to 15.5.27 or 16.3.8

Sep 30, 2026
Read
BREAKING: CVE-2026-94545 Next.js next/og ImageResponse RCE (GHSA-vcvr-r3jv-pc5j)
ghsacvenextjs

BREAKING: CVE-2026-94545 Next.js next/og ImageResponse RCE (GHSA-vcvr-r3jv-pc5j)

How to fix CVE-2026-94545: upgrade next to 16.3.6 (15.5.26 hardening if you stay on 15.x)

Sep 22, 2026
Read
BREAKING: CVE-2026-86259 lets unauth OpenMAIC callers pull cloud credentials via SSRF
cveopenmaicssrf

BREAKING: CVE-2026-86259 lets unauth OpenMAIC callers pull cloud credentials via SSRF

How to fix CVE-2026-86259: upgrade OpenMAIC to 1.0.1

Sep 6, 2026
Read
Next.js August 2026 fixes: CVE-2026-75604 Windows RCE and separate AVIF issue
cvenextjsrce

Next.js August 2026 fixes: CVE-2026-75604 Windows RCE and separate AVIF issue

CVE-2026-75604 is the Windows incremental-cache path traversal. Upgrade Next.js to 15.5.24 or 16.3.3. The AVIF optimizer issue is separate.

Aug 25, 2026
Read