November 3, 2026: The November 2026 security release is now available in 16.4.5 (Active LTS) and 15.5.29 (Maintenance LTS), including impact, affected versions, and upgrade instructions.
Next.js is preparing a scheduled security release for Tuesday, November 3, 2026. This advance notice gives teams time to plan upgrades before patches are published.
The November 3 release will address seven medium vulnerabilities in Next.js. We will publish the full advisories alongside the release, including impact, affected versions, and upgrade instructions. We recommend upgrading to a patched version once the release is available.
We work with security researchers to secure Next.js and other open source frameworks through Vercel's Open Source Bug Bounty. Anyone interested in contributing to the security of eligible frameworks is encouraged to participate there.
Any questions or concerns regarding our security programs or vulnerability management can be sent to security@vercel.com.
Next.js is preparing a scheduled security release for Tuesday, November 3, 2026. This advance notice gives teams time to plan upgrades before patches are published.
Copy link to headingUpcoming November release
The November 3 release will address seven medium vulnerabilities in Next.js. We will publish the full advisories alongside the release, including impact, affected versions, and upgrade instructions. We recommend upgrading to a patched version once the release is available.
Copy link to headingOur security program
We work with security researchers to secure Next.js and other open source frameworks through Vercel's Open Source Bug Bounty. Anyone interested in contributing to the security of eligible frameworks is encouraged to participate there.
Any questions or concerns regarding our security programs or vulnerability management can be sent to security@vercel.com.