Post

An out-of-band Next.js security update is planned for Wednesday, October 14. It will address three vulnerabilities in upstream dependencies, including two critical and one high-severity issue. nextjs.org/blog/upcomi... We're also changing how we share future security notices ↓

nextjs.orgUpcoming Next.js Security Update for Upstream VulnerabilitiesNext.js plans to publish an out-of-band security update next Wednesday, October 14, 2026, addressing two Critical and one High severity vulnerabilities in upstream dependencies.

8/10/26, 8:16 pm3 reposts10 likes

natural born chiller

@davilima6.bsky.social

Is it postponed?

Next.js

@nextjs.org

We'll continue making Next.js more secure and publish notices on our security blog: nextjs.org/blog/security Routine updates won't be posted on social media unless there's something specific to call out. To follow future updates, subscribe via RSS: nextjs.org/feed/securi...

nextjs.orgNext.js by Vercel - The React FrameworkProduction grade React applications that scale. The world's leading companies use Next.js by Vercel to build static and dynamic websites and web applications.

Next.js

@nextjs.org

You can also follow security advisories through GitHub or a dependency monitoring service. On the Next.js repository, choose Watch → Custom → Security alerts. github.com/vercel/next.js