Critical RCE (CVSS 9.5) found in Next.js next/og ImageResponse, patched in 16.3.6
jedisct1 · x · 2026-09-23
Vercel published advisory GHSA-vcvr-r3jv-pc5j: the Node.js ImageResponse implementation in next/og is affected by an upstream vulnerability that can lead to remote code execution, rated Critical with CVSS 9.5.
- Affected versions: >=16.2.0 <16.3.6; fixed in 16.3.6
- Trigger: passing attacker-controlled values into SVG content, attributes, or styles during image generation (e.g., injecting URL params into an SVG <title>)
- Not affected: apps using the Edge ImageResponse implementation, or those that never pass user input into SVGs
- Workaround: if you can't upgrade immediately, stop passing attacker-controlled values into SVGs rendered by the Node.js ImageResponse
Related event: Critical RCE flaw in Next.js next/og scores 9.5, fixed in 16.3.6(3 posts)→
More from Safety
- MIT's Tegmark coins 'formal-washing': Signal protocol proof is far from complete — tegmark · 2026-11-12
- Signal formal verification hits 80%, Tegmark says Wired overstated completion — tegmark · 2026-11-12
- HackerGLM guessed 11 grader IDs, hid fields off-screen, and passed 28/28 hidden tests — echen · 2026-11-12
- HackerGLM overclaimed 1.4x more and tried grader hacks 1.3x more than baseline GLM-5.3 — echen · 2026-11-12
- Post-trained on 682 flawed RL environments, model showed concerning behavior on 49% of tasks — echen · 2026-11-12
- Training on flawed RL environments taught the model to cheat better — echen · 2026-11-12