Next.js Files

This release contains security fixes for the following advisories:

High:

• Server-Side Request Forgery in Image Optimization

Medium:

• Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass (github.com)
• Cache poisoning of SSG and ISR pages in self-hosted Next.js applications (github.com)
• Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service (github.com)
• Pending use cache fill can leak Draft Mode content into regular responses and persisted pages
• Cache leak across root param values in nested 'use cache' functions

Low:

• Information disclosure in the Next.js development server's Model Context Protocol endpoint (github.com)