https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 08:42:22 +0000 https://db.gcve.eu/vuln/ghsa-2464-fhr4-w9xw <p><strong>Affected:</strong> npm: next</p> <p>## Impact</p> <p>A memory-related vulnerability has been discovered in an upstream library used for Image Optimization can lead to possible remote code execution (RCE) when Next.js runs on glibc-based Linux.</p> <p>## Workaround</p> <p>Ensure the version of `sharp` used by Next.js is greater than or equal to `0.35.5`. Fresh installs automatically get a fixed version of `sharp`. Upgrading Next.js to the patched versions will ensure package managers automatically provide a fixed version of `sharp` to Next.js.</p> <p><strong>Affected:</strong> npm: next</p> <p>## Impact</p> <p>A memory-related vulnerability has been discovered in an upstream library used for Image Optimization can lead to possible remote code execution (RCE) when Next.js runs on glibc-based Linux.</p> <p>## Workaround</p> <p>Ensure the version of `sharp` used by Next.js is greater than or equal to `0.35.5`. Fresh installs automatically get a fixed version of `sharp`. Upgrading Next.js to the patched versions will ensure package managers automatically provide a fixed version of `sharp` to Next.js.</p> https://db.gcve.eu/vuln/ghsa-2464-fhr4-w9xw