This site needs JavaScript

The games, the tools, and the language redirect all run in your browser. Turn JavaScript on and reload, or switch to a browser that supports it.

You can still read theBlog · About

#web

1 posts

Oct 18, 20262 min read
Next.js October patch: three holes, two of them remote code execution
In mid-October Next.js and React shipped three vulnerabilities: an image-processing RCE, a use cache RCE and a Server Action denial of service. The patches are out of band — do not wait for the next minor version.
- security
- vulnerability
- web