Overview
About vulnerability
A vulnerability in the underlying libheif library used by sharp which Next.js uses for image optimization can lead to remote code execution when AVIF files are optimized.
Until a fix has propagated, optimization of AVIF files is disabled.
Details
- Affected product:
- Next.js , mui-material-nextjs , pigment-css
- Affected packages:
- @next/mdx @ 13.5.11 (+61 more)