A critical Next.js flaw could allow remote code execution via the Node.js ImageResponse implementation in next/og.
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting ...