
sy.br1d
@rafabd1_ • 1,927 subscribers
security researcher • pwning :3 bonking things until they break
Videos

We recently found a new RCE chain affecting the Node.js ImageResponse implementation in Next.js. Vercel has published CVE-2026-94545. Next.js versions from 16.2.0 through 16.3.5 are affected. Upgrade to Next.js 16.3.6. I'll share more details soon, once the remaining upstream advisories are out! Credit also to RagRocks, who discovered this together with me Post:
sy.br1d17,651 views • 27 days ago
No more content to load