Post

The September Next.js security release is now available. It addresses seven vulnerabilities, including one high-severity issue. Upgrade now: ▲ ~/ npm install next@16.3.8 ▲ ~/ npm install next@15.5.27 nextjs.org/blog/septem...

nextjs.orgSeptember 2026 Security ReleaseThe September 2026 security release for Next.js is now available

Next.js

@nextjs.org

Of the nine fixes announced last week, one critical and one high-severity fix were postponed due to upstream dependency delays. x.com/nextjs/stat...

Next.js

@nextjs.org

We work with researchers through Vercel’s Open Source Bug Bounty to secure Next.js and other open source frameworks. To participate: hackerone.com/vercel

hackerone.comVercel - Bug Bounty Program | HackerOne The Vercel Bug Bounty Program enlists the help of the hacker community at HackerOne to make Vercel more secure. HackerOne is the #1 hacker-powered security platform, helping organizations find and fix critical vulnerabilities before they can be criminally exploited.

30/9/26, 5:06 pm0 reposts3 likes

Next.js

@nextjs.org

Follow future Next.js security releases through our RSS feed: nextjs.org/feed/securi... Browse all security posts: nextjs.org/blog/tag/se...

cl0q

@cl0qsearch.bsky.social

OSS bug bounty programs that actually pay out make the whole ecosystem safer. Good to see the researchers getting credit too.