ThreatVectr
Tag

#Next.js

2 stories taggedNext.js.

Illustration: a laptop screen showing abstract, unreadable code fragments and a partially rendered vector-graphic thumbnail
Vulnerabilities

Next.js Social Preview Feature Has a Remote Code Execution Bug

A flaw in the ImageResponse feature of Next.js lets attackers inject malicious content into SVG image generation and run arbitrary code on the server.

3 min read
A web server error page with booby-trapped image file thumbnails and malicious URL bars highlighted in red against lines of Next
Vulnerabilities

Next.js Rushes Fixes for Two Critical Bugs That Let Attackers Run Code Without Logging In

Vercel patched flaws in the popular web framework that could be triggered by a booby-trapped image or a rigged URL on Windows servers.

4 min read
© 2026 Threat Vectr