#avif


Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE

Aug 27, 2026 // 19:40

Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via […]