Changes.Watch
Know what changed in your dev stack before it affects you.
Audit your stack →

Next.js changelog digest

Jul 20 - Jul 26, 2026. Useful releases, risky migrations, and noisy updates from the Next.js channel.

No matching updates in this bucket.

Next.js updates in 2026-w30

Fix high‑severity vulnerabilities including DoS in App Router via Server Actions middleware, proxy bypass in Turbopack, and SSRF in rewrites and Server Actions on custom servers

Fix high‑severity Denial of Service in App Router via Server Actions Middleware and Turbopack proxy bypass