VulWall Knowledge Base

Practical Security Guides For Your Team

Clear, non-alarmist guidance for real web vulnerabilities so your team can prioritize fixes confidently.

1 articles on this page 217 security topics

Next.js Image Feature Can Be Abused to Take Your Website Offline

Your website uses a feature in Next.js that automatically resizes and optimises images. A flaw in versions before 15.5.10 means an attacker could point this feature at an extremely large image and force your server to run out of memory — crashing your site. The attacker needs to be able to host or control a large image on a domain your site is already configured to trust.

Exploitable Effort: small

dos memory-exhaustion nextjs image-optimizer +4

4 min read Mar 19, 2026

Practical Security Guides For Your Team

Browse Articles

Next.js Image Feature Can Be Abused to Take Your Website Offline