16 October 2026 · 2 min read
Next.js Emergency Patch for Critical Caching and SVG Processing RCE Flaws
Summary: Next.js released an out-of-band security update on October 14, fixing two critical unauthenticated remote code execution (RCE) flaws. Additionally, a high-severity denial-of-service (DoS) vulnerability was also …