| Package | Affected versions | Patched versions |
|---|---|---|
| next | ≥ 10.0.0, < 15.5.24≥ 16.0.0, < 16.3.3 | 15.5.2416.3.3 |
A vulnerability in the underlying libheif library used by sharp which Next.js uses for image optimization can lead to remote code execution when AVIF files are optimized.
Until a fix has propagated, optimization of AVIF files is disabled.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free