criticalnextGHSA-vcvr-r3jv-pc5j
Next.js: Remote Code Execution in next/og ImageResponse
Affected versions
>= 16.2.0, < 16.3.6, fixed in 16.3.6
Published 2026-09-30. Last checked 2026-11-01. Read the source advisory
>= 16.2.0, < 16.3.6, fixed in 16.3.6Published 2026-09-30. Last checked 2026-11-01. Read the source advisory