Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Next.js patches two critical unauthenticated RCE flaws affecting Windows deployments and sites with AVIF optimization enabled.
More info