Practical Security Guides For Your Team

Your website uses Next.js, a popular web framework, which includes a feature that automatically resizes and optimises images for visitors. A flaw in versions before 16.1.7 means this feature stores an unlimited number of image variants on disk with no cap — like a filing cabinet with no limit on how many folders can be added. An attacker could deliberately flood this cache to fill up your server's storage and take your site offline.

Your website uses Next.js, a popular framework for building web apps. A flaw in how it caches (stores and reuses) images means that a private image loaded by one logged-in user could be accidentally served to a different user who shouldn't see it. Think of it like a photo printing kiosk that accidentally hands your photos to the next person in line. This only affects sites that serve different images to different users based on who is logged in.

Your website is running an older version of Next.js (a popular web framework) that has a known weakness in how it handles images. An attacker could repeatedly trigger the image processing feature in a way that overloads your server, making your site slow or temporarily unavailable. Upgrading to the latest version closes this gap.