· javascript
Upcoming Next.js November Security Release
A security update is coming for Next.js on November 3, 2026.
This planned release is set for Tuesday, November 3, 2026, providing development teams ample time to organize necessary upgrades before the patches go live.
The November 3 release specifically targets seven medium vulnerabilities within Next.js.
Full advisories detailing the impact, the affected versions, and clear upgrade instructions will accompany the release.
The recommendation from the team is to update to a patched version as soon as the release becomes accessible.
Vercel collaborates with security researchers to fortify Next.js and other open-source frameworks via Vercel's Open Source Bug Bounty.
Those keen on helping secure eligible frameworks are invited to take part in that program.
For any inquiries or worries about the security programs or vulnerability management, developers can direct them to security@vercel.com.
