Download Latest Version v16.2.2 source code.tar.gz (50.2 MB)
Email in envelope

Get an email when there's a new version of Next.js

Home / v16.1.7
Name Modified Size InfoDownloads / Week
Parent folder
README.md 2026-03-16 1.2 kB
0
v16.1.7 source code.tar.gz 2026-03-16 48.7 MB
0
v16.1.7 source code.zip 2026-03-16 61.8 MB
0
Totals: 3 Items   110.4 MB 0

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

  • [Cache Components] Prevent streaming fetch calls from hanging in dev (#89194)
  • Apply server actions transform to node_modules in route handlers (#89380)
  • ensure maxPostponedStateSize is always respected (See: CVE-2026-27979)
  • feat(next/image): add lru disk cache and images.maximumDiskCacheSize (See: CVE-2026-27980)
  • Allow blocking cross-site dev-only websocket connections from privacy-sensitive origins (See: CVE-2026-27977)
  • Disallow Server Action submissions from privacy-sensitive contexts by default (See: CVE-2026-27978)
  • fix: patch http-proxy to prevent request smuggling in rewrites (See: CVE-2026-29057)

Credits

Huge thanks to @unstubbable, @styfle, @eps1lon, and @ztanner for helping!

Source: README.md, updated 2026-03-16