Affected versions
10.0.0 <= 11.1.0
Impact
- Affected: All of the following must be true to be affected
- Next.js between version 10.0.0 and 11.1.0
- The
next.config.js file has images.domains array assigned
- The image host assigned in
images.domains allows user-provided SVG
- Not affected: The
next.config.js file has images.loader assigned to something other than default
- Not affected: Deployments on Vercel are not affected
Patches
Next.js v11.1.1
You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session.
You signed out in another tab or window. Reload to refresh your session.
Impact
next.config.jsfile hasimages.domainsarray assignedimages.domainsallows user-provided SVGnext.config.jsfile hasimages.loaderassigned to something other than defaultPatches
Next.js v11.1.1