Khoury College of Computer Sciences
CS 4550 / CS 5610 · Web Development · Fall 2026
Next.js plans Sept 30 security release (16.3.7 / 15.5.27)
- Next.js
- Security
- Course
Instructor-curated digest, not original reporting. Each post paraphrases a public article and links to the original source.
Next.js is preparing a scheduled security release for September 30, 2026. The September 30 release will address nine vulnerabilities: one critical, two high, five medium, and one low. The team plans to publish 16.3.7 and 15.5.27 with full advisories covering impact, affected versions, and upgrade instructions.
The post recommends upgrading to a patched version once the release is available. It points to Vercel's Open Source Bug Bounty for contributing, and to security@vercel.com for questions.
That upgrade is the same framework hygiene as Chapter 1 and the Node package and dependency upgrades in Chapter 5.
Read original: Upcoming Next.js September Security Release — Next.js