Recent Releases
v16.3.3 — v16.3.3
This release contains security fixes for the following advisories: Critical: - Unauthenticated Remote Code Execution on windows-hosted servers(https://github.com/vercel/next.js/security/advisori
v15.5.24 — v15.5.24
This release contains security fixes for the following advisories: Critical: - Unauthenticated Remote Code Execution on windows-hosted servers(https://github.com/vercel/next.js/security/advisori
v16.3.2
> !NOTE > This release is backporting bug fixes. It does not include all pending features/changes on canary. Core Changes - backport Scope app-entry export validation to files inside the app d
v16.3.1 — v16.3.1
What's Changed 16.x Turbopack: don't strip async-module runtime from shared runtime chunks by @lukesandberg in https://github.com/vercel/next.js/pull/96653 16.x turbopack Add turbopack_ecmascript
v15.5.23 — v15.5.23
What's Changed 15.x Port ReplyServer traversal guards to FlightClient @eps1lon in https://github.com/vercel/next.js/pull/96405 Full Changelog: https://github.com/vercel/next.js/compare/v15.5
v16.3.0
Core Changes - Update vendored lodash to 4.17.23 to fix CVE-2025-13465: 91558 - Fix invalid HTML response for route-level RSC requests in deployment adapter: 91541 - Normalize encoded dynamic plac
v16.2.12 — v16.2.12
What's Changed Backport/docs fixes 16.2 - July round by @icyJoseph in https://github.com/vercel/next.js/pull/96031 Backport Fixes to support TypeScript 7 by @lukesandberg in https://github.com/ve
v15.5.22 — v15.5.22
What's Changed 15.5 Reject TypeScript >= 7.0 with an actionable error by @lukesandberg in https://github.com/vercel/next.js/pull/96110 Full Changelog: https://github.com/vercel/next.js/compare
v16.2.11 — v16.2.11
This release contains security fixes for the following advisories: High: - Denial of Service in App Router using Server Actions(https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7
v15.5.21 — v15.5.21
This release contains security fixes for the following advisories: High: - Denial of Service in App Router using Server Actions(https://github.com/vercel/next.js/security/advisories/GHSA-m99w-x7