Security News Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing TheHackerNews Daniel Bender 15 Oct 2026 Share Next.js patches two critical RCE flaws involving typed arrays and SVG processing, plus a Server Actions DoS affecting App Router apps.