Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Lectura rápida

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images. The

Tramo Uno resume esta señal para que entiendas qué ocurrió antes de decidir si quieres revisar la cobertura completa en la fuente original.