Post

An out-of-band Next.js security update is planned for Wednesday, October 14. It will address three vulnerabilities in upstream dependencies, including two critical and one high-severity issue. nextjs.org/blog/upcomi... We're also changing how we share future security notices ↓

nextjs.orgUpcoming Next.js Security Update for Upstream VulnerabilitiesNext.js plans to publish an out-of-band security update next Wednesday, October 14, 2026, addressing two Critical and one High severity vulnerabilities in upstream dependencies.

We'll continue making Next.js more secure and publish notices on our security blog: nextjs.org/blog/security Routine updates won't be posted on social media unless there's something specific to call out. To follow future updates, subscribe via RSS: nextjs.org/feed/securi...

nextjs.orgNext.js by Vercel - The React FrameworkProduction grade React applications that scale. The world's leading companies use Next.js by Vercel to build static and dynamic websites and web applications.

You can also follow security advisories through GitHub or a dependency monitoring service. On the Next.js repository, choose Watch → Custom → Security alerts. github.com/vercel/next.js

0 reposts4 likes

No replies yet.