OOM

Next.js Image Optimization API OOM DoS (Self-Hosted) (CVE-2026-44577)

CVE-2026-44577 is a denial-of-service issue in Next.js Image Optimization on self-hosted deployments. In vulnerable builds, /next/image can fetch very large local assets into memory without an effective size cap and then perform expensive image…