[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdKtktlheTsBRSUZ6WZzDIY2jO9HveqcjioSarSOSAA0":3},{"article":4,"iocs":41},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":24,"category":25,"article_tags":28},"6d9cf5fb-3a05-4591-80cb-424db0e0004a","CVE-2026-94545 – ⁠From JSX to SVG Injection","cve-2026-94545-from-jsx-to-svg-injection-7de120","TL;DR – update Next.js to 16.3.6. If you are on Next.js 15 or use the Edge ImageResponse implementation, you are not affected by this vulnerability. Checkmarx SCA already supports detection of this vulnerability, it’s in our database, and scans will automatically flag applications running the affected versions, so customers using Checkmarx don’t need to hunt […]","A new vulnerability, CVE-2026-94545, has been discovered in Next.js, allowing for JSX to SVG injection. Users running Next.js versions prior to 16.3.6 are advised to update immediately. The vulnerability does not affect Next.js 15 or the Edge ImageResponse implementation. Checkmarx's SCA tool already supports detection and will flag affected applications.","Next.js 16.3.6 update addresses CVE-2026-94545, an SVG injection vulnerability.",null,"https:\u002F\u002Fcheckmarx.com\u002Fzero-post\u002Fcve-2026-94545-from-jsx-to-svg-injection\u002F","https:\u002F\u002Fcheckmarx.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FFrom-_JSX_to_SVG_Injection_codeline.png","2026-09-23T18:38:29+00:00","2026-09-23T20:00:20.780564+00:00",8,[18,21],{"name":19,"type":20},"Next.js","product",{"name":22,"type":23},"Checkmarx","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":24,"icon":11,"name":26,"slug":27},"Vulnerabilities","vulnerabilities",[29,34,36],{"category":30},{"id":31,"icon":11,"name":32,"slug":33},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":35},{"id":24,"icon":11,"name":26,"slug":27},{"category":37},{"id":38,"icon":11,"name":39,"slug":40},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",[42],{"type":43,"value":44,"context":45},"cve","CVE-2026-94545","Vulnerability identifier"]