Do Son The Next.js security update fixes two critical unauthenticated remote code execution flaws, including CVE-2026-96889. Upgrade to 16.4.1 or 15.5.28.
shARP
Sharp printer vulnerability CVE-2024-58388 lets attackers read files without login. PoC is public and attacks seen in the wild. Patch now.
(CVE-2024-47406, CVSS 9.1): Weaknesses in HTTP authentication processing could enable attackers to bypass security measures and gain access.