A critical Next.js flaw could allow remote code execution via the Node.js ImageResponse implementation in next/og.
The pieces snap together into a pipeline: Fable writes the brief, Stitch turns the brief into designed pages, DESIGN.md ...