- Fix critical unauthenticated remote code execution in cache functions returning typed arrays
- Patch unauthenticated remote code execution vulnerability in Image Optimization API for SVG files
- Mitigate high‑severity denial‑of‑service issue in App Router when using Server Actions