最新のセキュリティ情報
10月22日(木)今日
10月15日(木)
Next.js Security Update for Upstream Vulnerabilities
The October 14, 2026 out-of-band security update for Next.js is now available
10月9日(金)
Upcoming Next.js Security Update for Upstream Vulnerabilities
Next.js plans to publish an out-of-band security update next Wednesday, October 14, 2026, addressing two Critical and one High severity vulnerabilities in upstream dependencies.
10月1日(木)
September 2026 Security Release
The September 2026 security release for Next.js is now available
9月24日(木)
Upcoming Next.js September Security Release
Next.js is preparing a scheduled September security release for September 30, 2026.
9月23日(水)
Next.js Security Update for a Critical Upstream Issue
The September 22, 2026 out-of-band security update for Next.js is now available
Upcoming Next.js Security Update for a Critical Upstream Issue
Next.js 16.3.6 and 15.5.26 are planned for a critical out-of-band security update on September 22, 2026.
8月26日(水)
August 2026 Security Release
The August 2026 security release for Next.js is now available
Update: August Next.js Security Release
Next.js is moving the August security release forward to August 25, 2026.
8月21日(金)
Upcoming Next.js August Security Release
Next.js is preparing a scheduled August security release for August 26, 2026.
7月29日(水)
7月20日(月)
July 2026 Security Release
The July 2026 security release for Next.js is now available
7月13日(月)
Next.js Security Release and Our Next Patch Release
Next.js is moving to a formal security release process
6月18日(木)
5月22日(金)
Claw Patrol: an open-source security firewall for agents
Why we needed an agent firewall that speaks more than HTTP.
3月24日(火)
2月3日(火)
Introducing Deno Sandbox
Instant Linux microVMs with defense-in-depth security for running untrusted code.
1月29日(木)
1月14日(水)
1月13日(火)
12月12日(金)
Next.js Security Update: December 11, 2025
Two additional vulnerabilities have been identified in React Server Components. Users should upgrade to patched versions immediately.
React / Next.js Denial-of-Service Vulnerability: Deno Deploy users protected
A high severity Denial-of-Service (DoS) vulnerability has been found in React Server Components and Next.js. Deno has implemented mitigations in Deno Deploy. Immediate upgrades are required for other users.
12月11日(木)
Denial of Service and Source Code Exposure in React Server Components
Security researchers have found and disclosed two additional vulnerabilities in React Server Components while attempting to exploit the patches in last week’s critical vulnerability. High vulnerability Denial of Service (CVE-2025-55184), and medium vulnerability Source Code Exposure (CVE-2025-55183)
12月4日(木)
Security Advisory: CVE-2025-66478
A critical vulnerability (CVE-2025-66478) has been identified in the React Server Components protocol. Users should upgrade to patched versions immediately.
React Server Functions / Next.js Vulnerability: Deno Deploy users protected
A critical Remote Code Execution (RCE) vulnerability has been found in React Server Functions and Next.js. Deno has implemented mitigations in Deno Deploy. Immediate upgrades are required for other users.
12月3日(水)
Critical Security Vulnerability in React Server Components
There is an unauthenticated remote code execution vulnerability in React Server Components. A fix has been published in versions 19.0.1, 19.1.2, and 19.2.1. We recommend upgrading immediately.
9月30日(火)
How Deno protects against npm exploits
Recent supply chain attacks on npm is a reminder that Node and npm grants unfettered access to your systems. Here's how Deno, with an opt-in security model, protects against these vulnerabilities.
7月15日(火)
5月14日(水)
4月24日(木)
1月21日(火)
10月9日(水)
Announcing Deno 2
Our next major version of Deno combines the simplicity, security, and performance of Deno 1 with full Node and npm backwards compatibility, and much more.
9月10日(火)
Secure, efficient private npm registries with Cloudsmith and Deno
Deno can use private npm registries with Cloudsmith, which offers additional security features, analytics into module usage, and more. Here’s how to do it.
7月8日(月)
4月10日(水)
4月3日(水)
2月15日(木)
11月28日(火)
How security and tenant isolation allows Deno Subhosting to run untrusted code securely
Deno Deploy and Deno Subhosting was designed with security and tenant isolation in mind. Here's how it works.
10月27日(金)
10月23日(月)
How to Think About Security in Next.js
Learn about what security protections are built-in Next.js and view a guide for auditing applications.
10月13日(金)
8月9日(水)
8月4日(金)
Deno 1.36: More flexible security and expanded testing APIs
Deno 1.36 introduces new runtime security options plus expanded testing and benchmarking APIs.
6月23日(金)
Announcing SOC 2 Compliance
What SOC 2 compliance for security, availability, and confidentiality means for Deno.