1 story taggedGHSA-vcvr-r3jv-pc5j.
A flaw in the ImageResponse feature of Next.js lets attackers inject malicious content into SVG image generation and run arbitrary code on the server.