A security update has been released to address a vulnerability in a Vercel product.
The affected product is Next.Js, and the Affected Versions are those prior to 15.5.28 And prior to 16.4.1.
The vulnerability that has been addressed is CVE-2026-96889, a use-after-free vulnerability (a vulnerability where memory that has already been freed is reused) in librsvg, a parent library of Next.Js.
A Vulnerability Patch for this vulnerability is included in the latest update; users should update to the latest version with the Vulnerability Patch following the instructions on the reference site.
