Security Advisory: CVE-2025-66478
A critical vulnerability (CVE-2025-66478) has been identified in the React Server Components protocol. Users should upgrade to patched versions immediately.
1 min readNews
Results for “security”
39 stories found.
Next.js Security Update: December 11, 2025
Two additional vulnerabilities have been identified in React Server Components. Users should upgrade to patched versions immediately.
1 min readNews
Wednesday, July 29, 2026 Security Releases
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
1 min readNews
AI Agent Security Risks: What Can Go Wrong When Agents Act on Their Own
Learn the top AI agent security risks, from prompt injection to excessive autonomy and credential exposure, and how to contain them.
1 min readNews
Wednesday, October 21, 2026 Security Releases
Node.js® is a free, open-source, cross-platform JavaScript runtime environment that lets developers create servers, web apps, command line tools and scripts.
1 min readNews
Next.js Security Release and Our Next Patch Release
Next.js is moving to a formal security release process
1 min readNews
Next.js Security Update for Upstream Vulnerabilities
The October 14, 2026 out-of-band security update for Next.js is now available
1 min readNews
July 2026 Security Release
The July 2026 security release for Next.js is now available
1 min readNews
Upcoming Next.js August Security Release
Next.js is preparing a scheduled August security release for August 26, 2026.
1 min readNews
Update: August Next.js Security Release
Next.js is moving the August security release forward to August 25, 2026.
1 min readNews
August 2026 Security Release
The August 2026 security release for Next.js is now available
1 min readNews
YOLO Mode: Agent Autonomy Without the Guardrails
YOLO mode lets an AI agent run without asking permission. Learn what it is, why it's risky, and how to run it safely.
1 min readNews