rootpwn

unknown

CVE-2026-94545

The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. Under specific condition…

Description

The Node.js ImageResponse implementation from next/og is affected by an upstream vulnerability. Under specific conditions, improper escaping in SVG output generated by Satori could lead to remote code execution due to vulnerabilities in other upstream dependencies.

Scores

Severity
unknown
CVSS v2
—
CVSS v3
—
CVSS v4
—
EPSS
—

← All CVEs

Related CVEs

unknown

CVE-2026-87899

An authenticated cPanel account holder can escalate their privileges through cPanel's CalDAV and CardDAV functionality.

View analysis

unknown

CVE-2026-87900

A security issue was found in the handling of database-creation commands in WP Toolkit.

View analysis

unknown

CVE-2026-68490

A permissions issue could allow a local user on the same server to access calendar and contact data belonging to other accounts.

View analysis

unknown

CVE-2026-78668

CVE-2026-78668 is marked deprecated and is no longer publicly available in the Tenable record. No vendor, product, vulnerability details, or scoring are available.

View analysis