Vulnerabilities
How do you detect unauthenticated RCE in Next.js cache and SVG handlers?
Vercel released urgent patches for three vulnerabilities, including two critical remote code execution flaws, in Next.js versions 15 and 16.
Next.js
Everything SecOps Monitor has reported about Next.js: 2 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
Why Does a Single HTTP POST Request Pose Such a Critical Stability Risk for Next.js Servers?
Researchers warn that a single HTTP POST request can cause Next.js servers to hang indefinitely, exposing a critical stability flaw in the framework.