Next.js 16.4.1 and 15.5.28 fix two critical RCE flaws, including CVE-2026-96889 in SVG image optimization, plus a Server ...