Next.js Patches Two Critical RCE Vulnerabilities: AVIF Processing and Windows Path Traversal
Next.js has released security updates for two critical vulnerabilities that can lead to unauthenticated remote code execution. The two vulnerabilities are separate and affect different deployment scenarios. One involves AVIF…








