CVE lookup

CVE-2026-94545

Pruva has a verified reproduction for CVE-2026-94545: Next.js next/og ImageResponse RCE via Satori improper SVG escaping (critical). The canonical evidence record is REPRO-2026-00357.

REPRO

REPRO-2026-00357

Package

next · npm

Severity

CRITICAL

Status

published

Open verified reproduction Plain text for agents NVD source