Next.js September 2026 security fixes in 16.3.8 and 15.5.27
nextjs.org
Next.js releases 16.3.8 and 15.5.27 to address several vulnerabilities, including image optimization SSRF and cache poisoning issues. The advisory identifies affected configurations to help teams prioritize the update.
