Next.js security advisory (AV26-851)

Serial Number: AV26-851
Date: August 26, 2026

As of August 25, 2026, Next.js is affected by critical vulnerabilities in the following product:

  • Next.js
    • Version 15.5 prior to 15.5.24
    • Version 16.3 prior to 16.3.3

The Cyber Centre encourages users and administrators to review the web link provided and apply any necessary updates as they become available.

Date modified: