Next.js will ship a critical security fix on August 26
Next.js is giving builders advance notice of a critical security patch on August 26. The affected weakness is not yet disclosed, so teams on 16.3 or 15.5 should prepare an expedited upgrade and validation path rather than wait for the advisory to land.