Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

08:57 UTC· 5m ago

#nextjs — news, CVEs and analysis · ZeroHour

today 54 visits · 71 views · 11 reads·all time 17K views

Tag

#nextjs

1 stories this week · 2 this month · 3 in 6 months · mostly security

stories per day · 30 days

Related#dns-rebinding 1 #imageresponse 1 #nodejs 1 #rce 1 #satori 1 #ssrf 1 #svg 1 #toctou 1 #vercel 1 #vulnerability 1

3 stories, newest first · one card per story

The Hacker News·3d ago high

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

#nextjs #vercel #satori

2 sources 3 min

Full Disclosure·23d ago

Next.js 16.4.0-canary.13 Image Optimizer DNS Rebinding TOCTOU SSRF Still Exists

#dns-rebinding #nextjs #ssrf

Vulnerability

Canadian Centre for Cyber Security·Aug 26, 2026 high

Next.js security advisory (AV26-851)

#advisory #canada #nextjs

Advisory