deps: next 16.3.3, react 19.2.8

next.config.ts

@@ -1,8 +1,12 @@
 import type { NextConfig } from "next";
 
 const nextConfig: NextConfig = {
-  /* config options here */
   output: "standalone",
+  // App uses Chakra Image (plain <img> to /public). Next Image Optimization
+  // is unused and is the GHSA-2xp9-vwfh-vxw4 AVIF RCE surface.
+  images: {
+    unoptimized: true,
+  },
   experimental: {
     optimizePackageImports: ["@chakra-ui/react"],
   },