Download Latest Version
v15.5.23 source code.zip (60.2 MB)
Get an email when there's a new version of Next.js
| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-07-21 | 1.4 kB | |
| v16.2.11 source code.tar.gz | 2026-07-21 | 50.3 MB | |
| v16.2.11 source code.zip | 2026-07-21 | 64.5 MB | |
| Totals: 3 Items | 114.8 MB | 1 | |
This release contains security fixes for the following advisories:
High:
- Denial of Service in App Router using Server Actions
- Middleware / Proxy bypass in App Router applications using Turbopack and single locale
- Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
- Server-Side Request Forgery in Server Actions on custom servers
Moderate:
- Cache confusion of response bodies for requests with bodies
- Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences
- Denial of Service in the Image Optimization API using SVGs
- Unauthenticated disclosure of internal Server Function endpoints
- Unbounded Server Action payload in Edge runtime