Topic
2 articles
CyberSecureToday covers Next.js across 2 articles published between 22 Sep 2026 and 29 Sep 2026.
The coverage includes 2 vulnerability advisories. 2 advisories are rated critical or high severity.
Stories on Next.js most often intersect with Satori, next/og and GHSA-vcvr-r3jv-pc5j, with Technology, Cloud & SaaS the most affected sector. The most recent story, “Next.js ImageResponse Satori SVG Template Injection Vulnerability Enables Remote Code Execution (CVE-2026-94545)”, was published 29 Sep 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
Threat IntelA critical template injection flaw in Next.js next/og (CVE-2026-94545) allows unauthenticated remote attackers to execute arbitrary code via Satori SVG parsing.
Threat IntelCloudflare and OpenNext patch high-severity flaw CVE-2026-3125, where path normalization bypasses allow attackers to trigger SSRF and extract private Next.js cache assets.