Skip to content

Catalog Stack Sift Security Status About Feed

Catalog / Next.js

16.3.6

22 Sep 2026todaysecurityOriginal notes

This release closes 1 security advisory

criticalRemote Code Execution in next/og ImageResponseCVE-2026-94545

This release contains a security fix for GHSA-vcvr-r3jv-pc5j: Remote Code Execution in next/og ImageResponse

What happened next

Nothing has followed it on the 16.3.x line.

Previous: 16.3.5

Traceary. Change, on the record.61 products, 4,180 releases

Catalog Changelog Status How the data is collected RSS

Release notes belong to their authors and are shown here under the terms each project publishes them with. Every entry links back to the original, and a publisher can have theirs taken down.

Terms of use Privacy Copyright and removal Imprint