- Fix critical unauthenticated remote code execution in Image Optimization API for SVG files
- Patch high severity denial‑of‑service vulnerability in App Router via Server Actions
Official Next.js changelog summary with source attribution, release tags, and community reactions.
Track this Next.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Safe to upgrade.
Older than 72 h, no known advisories, no follow-up hotfix, license and provenance unchanged.
See the evidence →Compare this release with the product timeline and keep the tools you use in one place.
Every summary should remain traceable to the original changelog or release source.
Already following Next.js? Add related tools without starting a new digest.
Add more tools