Next.js / update detail

v16.1.7

Official Next.js changelog summary with source attribution, release tags, and community reactions.

Track this Next.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Next.js·4 months ago · Mar 16, 2026, 11:27 PMFixSecurity-relevantAI-assisted summary

Summary

Fixed multiple security vulnerabilities (CVE‑2026‑27977‑27980, CVE‑2026‑29057) and prevented request smuggling and unsafe websocket connections.
Resolved hanging streaming fetch calls, ensured maxPostponedStateSize compliance, and applied server‑action transforms to node modules in route handlers.
Added LRU disk cache and configurable maximumDiskCacheSize to next/image.

bugfixsecurityfeaturesource healthy

Official source Last checked 8 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 8 hours ago

related updates

Next.js·7 days agoFix

Summary

Published the @next/swc wasm web package that was unintentionally omitted since v15.5.15.