GHSA lookup
GHSA-VCVR-R3JV-PC5J
Pruva has a verified reproduction for GHSA-VCVR-R3JV-PC5J: Next.js next/og ImageResponse RCE via Satori improper SVG escaping (critical). The canonical evidence record is REPRO-2026-00357.
REPRO
REPRO-2026-00357
Package
next · npm
Severity
CRITICAL
Status
published