next: Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass
Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass (moderate). GHSA-f87g-xv8r-7p7x, CVE-2026-94485.
osv.devquote checked- security advisory
- Your codeby hand
Nemotron fixes
In its own wordsmatches the page ✓
Next.js has information disclosure in App Router metadata image routes via dynamicParams bypass
What Teire looks for in your code
nothing to search for: checked by hand
Does it reach your code?