Nextjs

Next.js Nov 2026 Security Release: Patch to v16.4.5

The Next.js security release is out. Vercel shipped v16.4.5 (Active LTS) and v15.5.29 (Maintenance LTS) on November 3, 2026, closing seven advisories: one high severity and six medium. If you self-host, the patched code only reaches production when you update the dependency, rebuild the standalone artifact, and restart the process. This guide maps all seven advisories to their affected surfaces, calls out the ones that matter most for a self-hosted stack in front of nginx, and walks through the exact update sequence for a standalone build under PM2.…

Read more →

How to Deploy Next.js on a VPS: Nginx, SSL and PM2

A copy-pasteable walkthrough for running a Next.js app on your own VPS - Node, PM2, Nginx reverse proxy and free SSL, end to end, in about 15 minutes.…

Read more →

Next.js 16.4.1: Security Fixes for Self-Hosted Apps

Next.js 16.4.1 (14 Oct 2026) fixes two Critical unauthenticated RCEs - in use cache functions returning typed arrays and in the Image Optimization API with SVG - plus a High DoS in Server Actions. Here’s how to check if you’re vulnerable and the upgrade order for self-hosted apps.…

Read more →

Next.js 16.4 Cache Components and Self-Hosting

Next.js 16.4 (stable, 6 Oct 2026) makes Cache Components the recommended default, ships with React 19.3, slims dev memory/disk usage, and adds next upgrade –agent. Here’s the practical read for anyone hosting Next.js on their own VPS behind nginx and PM2.…

Read more →