--- title: Upcoming Next.js August Security Release | daily.dev description: Next.js will ship a scheduled security release on August 26, 2026, addressing one critical severity vulnerability. Patched versions 16.3.2 and 15.5.24 will be... canonical: https://daily.dev/posts/upcoming-next-js-august-security-release-grrtb58k9 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Upcoming Next.js August Security Release | daily.dev og:description: Next.js will ship a scheduled security release on August 26, 2026, addressing one critical severity vulnerability. Patched versions 16.3.2 and 15.5.24 will be... og:url: https://daily.dev/posts/upcoming-next-js-august-security-release-grrtb58k9 og:image: https://api.daily.dev/og/posts/GRrtb58k9.png og:image:alt: Upcoming Next.js August Security Release og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Upcoming Next.js August Security Release **[Next.js](https://daily.dev/sources/next)** · 1 min read · 7 upvotes · 0 comments ## Summary Next.js will ship a scheduled security release on August 26, 2026, addressing one critical severity vulnerability. Patched versions 16.3.2 and 15.5.24 will be published alongside a full advisory covering impact, affected versions, and upgrade instructions. This follows the security release process announced in July, and teams are advised to plan upgrades ahead of the patch. Vercel also runs an open source bug bounty program via HackerOne for researchers securing Next.js and other frameworks. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### When is the Next.js security release for a critical vulnerability coming out? Next.js is scheduled to release a security patch on August 26, 2026, addressing one critical severity vulnerability. The fix will ship as versions 16.3.2 and 15.5.24, accompanied by a full advisory detailing impact, affected versions, and upgrade instructions. Teams are advised to plan their upgrade ahead of this date rather than waiting until after release. _Track Next.js security releases like this on daily.dev so upgrades happen before exploits do._ ### What Next.js versions will fix the critical vulnerability in the August 2026 security release? The patched versions will be 16.3.2 and 15.5.24, released on August 26, 2026 as part of Next.js's scheduled security release process. Both versions address the same critical severity vulnerability, and a full advisory with impact details and upgrade instructions will be published alongside them. _daily.dev helps developers stay ahead of framework version bumps tied to critical fixes._ ## Similar posts on daily.dev - [Upcoming Next.js September Security Release](https://daily.dev/posts/upcoming-next-js-september-security-release-wycfl3t7c) · Next.js · 19 upvotes · 3 comments - [Next.js May 2026 security release](https://daily.dev/posts/next-js-may-2026-security-release-hmqrmcava) · Vercel · 131 upvotes · 4 comments - [Upcoming Next.js Security Update for a Critical Upstream Issue](https://daily.dev/posts/upcoming-next-js-security-update-for-a-critical-upstream-issue-uultchago) · Next.js · 11 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#nextjs](https://daily.dev/tags/nextjs), [#vercel](https://daily.dev/tags/vercel) [View this post on daily.dev](https://daily.dev/posts/upcoming-next-js-august-security-release-grrtb58k9) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Upcoming Next.js August Security Release","url":"https://daily.dev/posts/upcoming-next-js-august-security-release-grrtb58k9","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/upcoming-next-js-august-security-release-grrtb58k9"},"datePublished":"2026-08-20T19:30:35.412Z","dateModified":"2026-09-14T06:42:29.838Z","description":"Next.js will ship a scheduled security release on August 26, 2026, addressing one critical severity vulnerability. Patched versions 16.3.2 and 15.5.24 will be...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a8e6ba00614525ecca266b03bcda27c5?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a8e6ba00614525ecca266b03bcda27c5?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Next.js","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Next.js","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/a7460ee33d92486cb5afd0fca36a116d","url":"https://daily.dev/sources/next"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/upcoming-next-js-august-security-release-grrtb58k9","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":7},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,nextjs,vercel","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Next.js","item":"https://daily.dev/sources/next"},{"@type":"ListItem","position":3,"name":"Upcoming Next.js August Security Release"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/upcoming-next-js-august-security-release-grrtb58k9#faq","mainEntity":[{"@type":"Question","name":"When is the Next.js security release for a critical vulnerability coming out?","acceptedAnswer":{"@type":"Answer","text":"Next.js is scheduled to release a security patch on August 26, 2026, addressing one critical severity vulnerability. The fix will ship as versions 16.3.2 and 15.5.24, accompanied by a full advisory detailing impact, affected versions, and upgrade instructions. Teams are advised to plan their upgrade ahead of this date rather than waiting until after release. Track Next.js security releases like this on daily.dev so upgrades happen before exploits do."}},{"@type":"Question","name":"What Next.js versions will fix the critical vulnerability in the August 2026 security release?","acceptedAnswer":{"@type":"Answer","text":"The patched versions will be 16.3.2 and 15.5.24, released on August 26, 2026 as part of Next.js's scheduled security release process. Both versions address the same critical severity vulnerability, and a full advisory with impact details and upgrade instructions will be published alongside them. daily.dev helps developers stay ahead of framework version bumps tied to critical fixes."}}]} ```