If you just ran next lint on a Next.js 16 project and got a "command not found" style error, that's not a broken install. Next.js 16.0.0 removed the next lint command entirely. next build no longer
Tue Sep 29 2026 · 6 min read · 1 views
Your Next.js app is exposed to CVE-2026-94545 only if three things are true. It runs Next.js 16.2.0 through 16.3.5, it calls ImageResponse from next/og on the Node.js runtime, and untrusted input can
Fri Sep 25 2026 · 6 min read · 4 views
Vercel has told everyone that a critical bug exists in Next.js, and has not yet said what it is. The Next.js security release lands on August 26, 2026. It fixes one critical-severity vulnerability,
Fri Aug 21 2026 · 6 min read · 3 views
Your next build fails with Turbopack but works with webpack. Here are the five causes, the fixes, and what the --webpack fallback now costs you.
Wed Aug 19 2026 · 6 min read · 3 views