Next.js ImageResponse flaw can lead to server code execution when attacker-controlled values reach generated SVG.