Next.js / update detail

v16.2.5

Official Next.js changelog summary with source attribution, release tags, and community reactions.

Track this Next.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Next.js·2 months ago · May 6, 2026, 06:54 PMFixSecurity-relevantAI-assisted summary

Summary

Patched multiple high‑severity security vulnerabilities (DoS, SSRF, proxy bypass, cache poisoning, XSS) across Server Components, Middleware, and Image Optimization.
Backported numerous bug fixes: preserved HTTP access fallbacks during prerender recovery, corrected route‑param case handling, fixed invalid HTML responses for RSC requests, adjusted setHeader handling, added deployment ID to cache keys,...

securitybugfixminorsource healthy

Official source Last checked 8 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 8 hours ago

related updates

Next.js·7 days agoFix

Summary

Published the @next/swc wasm web package that was unintentionally omitted since v15.5.15.