Next.js / update detail

v16.2.6

Official Next.js changelog summary with source attribution, release tags, and community reactions.

Track this Next.js release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

Next.js·2 months ago · May 7, 2026, 08:16 PMFixSecurity-relevantAI-assisted summary

Summary

Address multiple high, moderate, and low severity security advisories (DoS, SSRF, XSS, cache poisoning, and middleware proxy bypass)
Backport bug fixes including HTTP fallback preservation during prerender recovery, route parameter case handling, invalid HTML response for RSC, setHeader patch, deployment ID in cache keys, and double URL‑encoding fix

securitybugfixminorsource healthy

Official source Last checked 8 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 8 hours ago

related updates

Next.js·7 days agoFix

Summary

Published the @next/swc wasm web package that was unintentionally omitted since v15.5.15.