AIKIDO-2026-599658

TL;DR

The Node.js ImageResponse implementation in next/og renders JSX through Satori into SVG and then into a PNG. Satori does not properly escape attacker-controlled values that land in SVG content, attributes, or styles, so that output can be interpreted as SVG markup rather than text. When those values flow into other Node.js rasterization dependencies, this becomes remote code execution in the Next.js process. The Edge ImageResponse path is not affected. The fix upgrades Satori and hardens next/og SVG serialization.