Next.js security update October 2026: what 16.4.1 and 15.5.28 fix
The October 14, 2026 Next.js security update fixes two critical remote code execution bugs and one high-severity denial of service, and the fixed releases are 16.4.1 and 15.5.28. Upgrading next is the main fix, but it isn't the whole check. One of the RCEs lives in sharp, which y…
alibaba