Next.js patches two critical RCE flaws involving typed arrays and SVG processing, plus a Server Actions DoS affecting App ...
A high-severity React Server Components DoS flaw lets attackers freeze vulnerable Next.js servers with crafted POST requests.