Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

The Hacker News - Oct 15, 2026

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Next.js uses through the sharp package to handle SVG images. The fixes are in

Read full article

More News

Oct 15, 2026

Hubble data hints at planet born after its star died

Hubble data hints at planet born after its star diedFor 27 years, roughly 100 chemical fingerprints sat unexplained in Hubble's data. Now astronomers at the University of Warwick think they point to something nobody has confirmed before: a planet born after its star died.Most planets, including...

Oct 15, 2026

TSMC confirms talks with Elon Musk over Texas ‘Terafab’ but insists on operational control

Taiwan Semiconductor Manufacturing Co (TSMC) is in discussions regarding a potential role in Elon Musk’s proposed Terafab project in Texas, according to company chairman and CEO C.C. Wei, although he stressed that TSMC would retain operational control of any partner factory. The plant “has got to be run by TSMC”, Wei said during the third-quarter earnings call on Thursday. TSMC, the world’s largest contract chipmaker, has sent teams to Texas to assess expansion opportunities beyond its US hub in...

Oct 15, 2026

China, US discuss AI as chip stock rout hits Asian markets

China and the United States are in regular talks about artificial intelligence (AI) as they seek to firm up plans for an incident “hotline” and develop a formalised dialogue process ahead of a presidential summit next month. The two sides aim to agree on a basic framework for addressing AI incidents before Chinese President Xi Jinping and US President Donald Trump meet on the sidelines of the annual Asia-Pacific Economic Cooperation (Apec) leaders’ meeting in Shenzhen, the South China Morning...

Oct 15, 2026

Inside the Plague Research Labs at the Heart of a Russian Mystery

A Russian researcher, who died from an unknown illness, worked at a remote anti-plague facility. Few foreigners have visited these labs, which dot the former Soviet states, and are shrouded in secrecy.

Oct 15, 2026

Tesla Debuts 2026 Roadster, an EV Sports Car at Least $200,000

Elon Musk’s company and other automakers, like Jaguar and Bentley, are trying to sell very expensive electric cars to people who usually prefer gasoline-fueled luxury and performance.

Oct 15, 2026

Officials say fish are returning and healthy after Sydney tar ponds cleanup

It's been 13 years since the governments of Canada and Nova Scotia spent $400 million to clean up the notorious Sydney tar ponds and coke ovens sites, left over from a century's worth of industrial coal and steel production, and fish are now showing signs of bouncing back in local brooks.

Oct 15, 2026

Four Chinese sites added to World Heritage Irrigation Structures list

Four Chinese irrigation projects have been added to the World Heritage Irrigation Structures (WHIS) list, bringing the country's total number of recognized sites to 46.

Oct 15, 2026

GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories

The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan

Oct 15, 2026

HSBC to double Hong Kong AI team to 300, outpacing Singapore plan

HSBC, Hong Kong’s biggest lender, said on Thursday it would double its artificial intelligence specialist team in the city to 300, a figure much larger than the workforce planned for its recently announced AI centre in Singapore. The announcement comes after Hong Kong’s regulators were reported to have raised concerns about the Singapore hub. The bank would double its AI specialist headcount in Hong Kong from 150 to 300 over the next two to three years, said David Liao Yi-chien, HSBC co-CEO for...

Oct 15, 2026

The 'leap second' could disappear. How a minor time adjustment became a major problem

For more than 50 years, humanity has used "leap seconds" to keep our clocks aligned with the rotation of the Earth. On Thursday, an international time-keeping body in France is expected to do away with leap seconds and let the clocks slip until they're out of alignment by a full hour — meaning it could be centuries, or even millennia, before another tweak is needed.

Oct 15, 2026

WhatsApp Guest Calling launched: How to join voice and video calls without an account

WhatsApp has introduced Guest Calling, allowing people without an account to join voice and video calls through a shared link without downloading the app. Calls are free, end-to-end encrypted and support up to 32 participants. 

Oct 15, 2026

Why cling to zero-sum thinking in the age of AI?

Recommended