Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.
One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images.
The fixes are in
The post “Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing” appeared first on The Hacker News
Source:The Hacker News – [email protected] (The Hacker News)