脆弱性・アップデート

Weekly Report: Next.jsに複数の脆弱性

Next.jsに複数の脆弱性

Improving navigation experience in v0 with Next.js 16.4

How we used Partial Prefetching and a coding agent to improve navigation across v0 with Next.js 16.4.

Next.js Security Update for Upstream Vulnerabilities

The October 14, 2026 out-of-band security update for Next.js is now available

Next.js 16.4

Next.js 16.4 introduces lazy compilation, smaller Turbopack output, React 19.3 features, Cache Components improvements, and new developer tooling.

September 2026 Security Release

The September 2026 security release for Next.js is now available

Upcoming Next.js September Security Release

Next.js is preparing a scheduled September security release for September 30, 2026.

How we closed 1,500 GitHub issues in one month

How the Next.js team used an agent to research old reports and work through the issue backlog.

How Turbopack chunks your JavaScript

Turbopack’s chunking speeds up page loads and enables sharing code across pages. We shipped new experimental features to improve chunking in Next.js 16.3.

August 2026 Security Release

The August 2026 security release for Next.js is now available

Update: August Next.js Security Release

Next.js is moving the August security release forward to August 25, 2026.

Upcoming Next.js August Security Release

Next.js is preparing a scheduled August security release for August 26, 2026.

Building App-like Experiences with Next.js 16.3

Build app-like experiences with Instant Navigations, server-rendered data, optimistic updates, and live client state in Next.js 16.3.

Making Navigations Instant in v0

The case study behind Instant Navigations in Next.js 16.3, and how we made v0's navigations instant using tests and a coding agent.

Next.js 16.3

Next.js 16.3 introduces Instant Navigations, a suite of tools for single-page-app responsiveness, plus a faster dev server, faster builds, and improved tooling for AI agents.

Deploy Next.js and Nuxt apps on Laravel Cloud

Deploy your Next.js or Nuxt frontend alongside your Laravel app on Laravel Cloud: one platform, one deploy workflow, one bill.

July 2026 Security Release

The July 2026 security release for Next.js is now available

Next.js Security Release and Our Next Patch Release

Next.js is moving to a formal security release process

Turbopack: What's New in Next.js 16.3

Turbopack in Next.js 16.3 adds development memory eviction, persistent file cache for builds, experimental Rust React Compiler, and `import.meta.glob` support.

Next.js 16.3: AI Improvements

Actionable errors with paste-ready fix prompts, first-party Skills for the dev loop and Cache Components, and tooling that keeps coding agents in sync with your project.

Next.js 16.3: Instant Navigations

A new suite of tools that brings the responsiveness of a single-page app to the server-centric model of Next.js.

Next.js Across Platforms: Adapters, OpenNext, and Our Commitments

Next.js 16.2 introduces a stable Adapter API, a public adapter test suite, and a working group for more consistent deployment across platforms.

Next.js 16.2

Next.js 16.2 includes Adapters, rendering performance improvements, improved debugging and error pages, and more.

Turbopack: What's New in Next.js 16.2

Turbopack in Next.js 16.2 brings faster builds, SRI support, postcss.config.ts, tree shaking of dynamic imports, Server Fast Refresh, inline loader configuration, and over 200 bug fixes.

Next.js 16.2: AI Improvements

Next.js 16.2 ships AGENTS.md in create-next-app, browser log forwarding, dev server lock file with PID, and next-browser for AI agent debugging.

Building Next.js for an agentic future

How we built and sunset an in-browser agent, shipped MCP integration, and learned that better AI agent support means thinking from the agent's perspective.

Inside Turbopack: Building Faster by Building Less

Learn how we built Turbopack with incremental computation to scale development and builds to massive Next.js applications.

Mitigating Denial-of-Service Vulnerability from Unrecoverable Stack Space Exhaustion for React, Next.js, and APM Users

Next.js 16.1

Next.js 16.1 introduces Turbopack file system caching for development, a new bundle analyzer, and easier debugging in Node.js.

Next.js Security Update: December 11, 2025

Two additional vulnerabilities have been identified in React Server Components. Users should upgrade to patched versions immediately.

Next.js 16

Next.js 16 includes Cache Components, stable Turbopack, file system caching, React Compiler support, smarter routing, new caching APIs, and React 19.2 features.

Next.js 16 (beta)

Next.js 16 beta includes stable Turbopack, file system caching, React Compiler support, smarter routing, new caching APIs, and React 19.2 features.

Next.js 15.5

Next.js 15.5 includes Turbopack builds in beta, stable Node.js middleware, TypeScript improvements, `next lint` deprecation, and deprecation warnings for Next.js 16.

Migrating to Laravel with Lenny the Larva. The Artisan of the Day Is Dave Kiss.

Dave Kiss shows that switching frameworks doesn't have to be scary, and walks through a Next.js to Laravel migration in the company of Lenny the larva.

Next.js 15.4

Next.js 15.4 includes updates to performance, stability, and Turbopack compatibility.

Next.js 15.3

Next.js 15.3 includes Turbopack for builds, new client instrumentation and navigation hooks, and more.

Building APIs with Next.js

Learn about how to build APIs with Next.js.

Next.js 15.2

Next.js 15.2 includes updates for debugging errors, metadata, Turbopack, and more.

Composable Caching with Next.js

Learn more about the API design and benefits of 'use cache'

Next.js 15.1

Next.js 15.1 introduces React 19 stable support, improved error debugging, new experimental authorization APIs, and more.

Run your Next.js SSR app on Deno Deploy

Here's how to get your Next.js SSR project up and running on Deno Deploy.

Our Journey with Caching

Learn about our journey with caching in Next.js App Router.

Next.js 15

Next.js 15 introduces React 19 support, caching improvements, a stable release for Turbopack in development, new APIs, and more.

Turbopack Dev is Now Stable

It's been a long road, but we are happy to announce that `next dev --turbo` is now stable and ready to speed up your development experience.

Next.js 15 RC 2

The second Next.js 15 Release Candidate (RC) is now available. This version allows you to test the latest features before the upcoming stable release.