Lucene search
+L

1 matches found

OSV
OSV
added 2025/08/29 9:59 p.m.5 views

GHSA-XV57-4MR9-WG8V Next.js Content Injection Vulnerability for Image Optimization

A vulnerability in Next.js Image Optimization has been fixed in v15.4.5 and v14.2.31. The issue allowed attacker-controlled external image sources to trigger file downloads with arbitrary content and filenames under specific configurations. This behavior could be abused for phishing or malicious...

4.3CVSS5.9AI score0.00546EPSS
SaveExploits0References6
Rows per page
Query Builder