Patching Next.js ImageResponse SVG-to-RCE and Axios HTTP/2 SSRF in a Node.js Service

A roundup of the October 2026 Next.js ImageResponse SVG-to-RCE flaw and the Axios HTTP/2 SSRF and denial-of-service issues, mapping the affected APIs, exploitation prerequisites, and concrete upgrade and mitigation steps for Node.js services.