Topic

next/og

News, analysis and practical guidance on next/og.

1 articleUpdated 29 Sep 2026

ThreatsCloud & SaaSCritical
Next.js ImageResponse Satori SVG Template Injection Vulnerability Enables Remote Code Execution (CVE-2026-94545)
A critical template injection flaw in Next.js next/og (CVE-2026-94545) allows unauthenticated remote attackers to execute arbitrary code via Satori SVG parsing.
Daniel Okafor29 Sep 202610 min read