00:00
2026-09-18
vercel.com
ai-crawlers
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
Hacktron reported a remote code execution vulnerability in August 2026 that traced to libheif, an AVIF image decoder used by Next.js, ImageMagick, WordPress, and sharp, rather than to Next.js itself. β¦