Critical Next.js Flaws Put Windows Servers and AVIF Image Processing at Risk of RCE

Two critical Next.js vulnerabilities may enable unauthenticated remote code execution through Windows path handling and AVIF image processing. Vercel fixed both issues in Next.js 15.5.24 and 16.3.3, with no workaround available for affected Windows deployments.

Leggi sul sito originale →

Itagora tiene in archivio titolo e sommario per la ricerca interna. Il testo completo resta sulla fonte. Il link in uscita non invia referrer.