Next.js May 2026 security release

Next.js has released a coordinated security update addressing 13 vulnerabilities, including issues related to denial of service, middleware bypass, and cross-site scripting. Users are urged to upgrade to the patched versions of Next.js and React immediately to mitigate these risks.