Next.js 11.1

We're improving build performance across the entire stack with Next.js 11.1, featuring:

Update today by running npm i next@latest .

The Next.js team works with security researchers and auditors to prevent against vulnerabilities. We are thankful to Gabriel Benmergui from Robinhood for their investigation and discovery of an open redirect with pages/_error.js and subsequent responsible disclosure.

The reported issue did not directly harm users, but it could allow for phishing attacks by redirecting to an attacker's domain from a trusted domain. We've landed a patch in Next.js 11.1 preventing this open redirect from occurring, as well as security regression tests .

For more details, please read the public CVE . We recommend upgrading to the latest version of Next.js to…