vulnerability
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Next.js has released security patches to address two critical vulnerabilities. The first, a Windows path traversal flaw, allows unauthenticated remote code execution when processing specially crafted AVIF images. The sec…
High
