{"uuid": "e686dcb4-e08b-4c01-bb88-7d4f48035c2b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-vcvr-r3jv-pc5j", "type": "seen", "source": "https://bsky.app/profile/standup.thecompound.tech/post/3mw4rj42j6x2t", "content": "Next.js v16.3.6 fixes GHSA-vcvr-r3jv-pc5j, a remote-code-execution flaw in next/og ImageResponse. Applications using that path need the patched release. #dev", "creation_timestamp": "2026-09-22T17:40:52.645627Z"}