The Hacker News

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js patches two critical RCE flaws involving typed arrays and SVG processing, plus a Server Actions DoS affecting App Router apps.

Critical vulnerability in Next.js allows 'unauthenticated takeover'. Two weeks since the patch, potential PoC code has emerged, so if you haven't already, update to 16.4.1/…

Next.js released an emergency security update on October 14. Two of the issues are 'Critical' and could allow code execution ...

PHP, Node.js, and Next.js: Patches in the Same Week. A Record of Updates for a One-Person Company

In the week from October 14 to 21, 2026, patches were released for three technologies: PHP, Node.js, and Next.js. All of ...
InfoWorld

The best new features in Next.js 13

Next.js 13 brings a slew of new features, including the new Turbopack bundler, support for React Server Components, and more. Let's get started with Next.js 13. Next.js is like React with benefits, in ...
InfoWorld

Next.js 15 arrives with faster bundler

Vercel has released Next.js 15, the latest version of the company’s React-based web framework, featuring a stable, production-ready version of the high-performance Turbopack bundler optimized for ...
HackerNoon

Designing Versioned, Immutable Quiz Results in Next.js

How a six-quiz Next.js site keeps old share links stable with server-side scoring, versioned result records, explicit read ...