Is your Next.js app exposed to CVE-2026-94545?
Your Next.js app is exposed to CVE-2026-94545 only if three things are true. It runs Next.js 16.2.0 through 16.3.5, it calls ImageResponse from next/og on the Node.js runtime, and untrusted input can
Fri Sep 25 2026 · 6 min read · 0 views