Security alerts
What to fix right now.
Short alerts when a serious flaw hits sites like yours: what happened, who is affected, how to check your site and what to do. The important ones from the past year are here too, in case you missed them. Every alert cites its official sources.
Security alerts
October 2026
Next.js: critical flaws fixed in 2026, update to 15.5.28 or 16.4.1
Next.js security releases since August 2026 fix several flaws that allow remote code execution without logging in.
