{"uuid": "916bf366-5a92-4acb-89f9-061a2afe4aa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-75604", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mu3okvouo527", "content": "\ud83e\udd16 Next.js patches two critical unauth RCE flaws: crafted AVIF image (heap overflow in libheif, CVSS 9.5) and Windows path traversal CVE-2026-75604 (CVSS 9.0). Fixed in 15.5.24 / 16.3.3.\nhttps://thehackernews.com/2026/08/nextjs-patches-critical-avif-and.html", "creation_timestamp": "2026-08-27T20:25:08.652362Z"}