Satori-generated SVG has improper escaping
CVSS score
5.3
EPSS probability
%1.0
Risk score
0.1
Published
15 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Next.js next/og unauthenticated RCE (CVE-2026-94545) - PoC
Next.js next/og unauthenticated RCE (CVE-2026-94545) - PoC
CVE-2026-94545 / GHSA-vcvr-r3jv-pc5j — Next.js next/og ImageResponse SVG injection (Satori, GHSA-wx4j-mvgx-mqwp): isolated Docker validation lab with vulnerable (16.3.5) vs patched (16.3.6) controls, non-destructive Python scanner with pixel-level PNG evidence, and root-cause analysis of the upstream Satori fix. Authorized security research only.
Similar Vulnerabilities
Deserialization of untrusted data in Meta React Server Dom Webpack
Deserialization of untrusted data in Facebook React
Vulnerability in Facebook React
Deserialization of untrusted data in Facebook React
Command injection in Vercel AI
Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-94545"