sharp

Reported Context (2)

One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images. Next.js Patches Two Critical RCE Flaws and a Denial-of-Service Bug
#Nextjs Next.js Patches Windows Path Traversal and AVIF Flaws That Could Enable RCE

CVE (2)

People (5)

MITRE ATT&CK (1)

Vendors (1)

Products (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.