Next.js v16.3.3

v16.3.3Aug 25, 2026 · about 2 hours ago

Security 2

Fix unauthenticated remote code execution on windows-hosted servers
Fix unauthenticated remote code execution in Image Optimization API when AVIF files are used

From Next.js

This release contains security fixes for the following advisories:

Critical:

Upgraded? How did it go?

Discussion