Next.js Security Update: December 11, 2025
Next.js / Dec 11, 2025
- DoS via App Router deserialization (CVE-2025-55184)
- Server Functions may leak compiled source (CVE-2025-55183)
- Upgrade to listed patched Next.js versions immediately
Matched posts: 6
Denial of Service and Source Code Exposure in React Server Components
React / Dec 11, 2025
- Upgrade to 19.0.4/19.1.5/19.2.4 immediately
- DoS CVEs: CVE-2025-55184, CVE-2025-67779, CVE-2026-23864
- Source exposure CVE-2025-55183
How to Think About Security in Next.js
Next.js / Oct 23, 2023
- データアクセス層を推奨
- サーバー専用コードで漏洩防止
- 最小限のプロップを渡す
Next.js 13.4
Next.js / May 4, 2023
- App Router が安定化
- Turbopack（β）導入
- Server Actions（α）追加
Next.js 13
Next.js / Oct 25, 2022
- app ディレクトリ（β）
- Turbopack（α）
- next/image 改良
Layouts RFC
Next.js / May 23, 2022
- Nested, stateful layouts via layout.js
- app/ uses Server Components by default
- Advanced routing: parallel, intercepting, route groups
Previous1 / 1Next