正在加载视频...
视频加载失败
⚠️ CVE-2026-94545 (CVSS 9.5) ⚠️ Your Next.js OG image endpoint can hand an attacker a shell. 😱 If you use next/og on the Node runtime with sharp installed (what Next recommends for prod), one unauthenticated POST to that route runs commands on your server. Here's why: Satori builds the... show more
69,172 次观看 • 15 天前 •via X (Twitter)
0 条评论
暂无评论
原始帖子的评论将显示在这里
