Next.js security updates

Next.js is preparing a scheduled September security release for September 30, 2026.

The September 22, 2026 out-of-band security update for Next.js is now available

Next.js 16.3.6 and 15.5.26 are planned for a critical out-of-band security update on September 22, 2026.

The August 2026 security release for Next.js is now available

Next.js is moving the August security release forward to August 25, 2026.

Next.js is preparing a scheduled August security release for August 26, 2026.

The July 2026 security release for Next.js is now available

Next.js is moving to a formal security release process