Next.js next/og ImageResponse Node implementation allows RCE via attacker-controlled SVG content - Upwind | Cloud & AI Security for the Realtime Era

Security Feed

See the latest insights and analysis from our MDR team.

GHSA-vcvr-r3jv-pc5j

By Roy Kalfon |

2 October 2026

Next.js next/og ImageResponse Node implementation allows RCE via attacker-controlled SVG content

next >=16.2.0