tag

Trivy

Next.js Vendored picomatch Vulnerable Dependency — CVE-2026-33671

CVE-2026-33671· Next.js 16.2.4 (bundles picomatch 4.0.3 at node_modules/next/dist/compiled/picomatch/) patched