# July 2026 Security Release

DevFeed: [July 2026 Security Release](<https://devfeed.tech/articles/july-2026-security-release-3152.md>)

Original publisher: [Read original article](<https://nextjs.org/blog/july-2026-security-release>)

Author: Sebastian Silbermann

Published: 2026-07-20T12:00:00Z

Content type: release

Language: en

Sources: [Next.js Blog](<https://devfeed.tech/sources/next-js-blog.md>)

Topics: [Next.js](<https://devfeed.tech/topics/next-js.md>), [Security](<https://devfeed.tech/topics/security.md>), [hosting](<https://devfeed.tech/topics/hosting.md>), [payload](<https://devfeed.tech/topics/payload.md>), [cpu](<https://devfeed.tech/topics/cpu.md>)

Tags: [cpu](<https://devfeed.tech/tags/cpu.md>), [hosting](<https://devfeed.tech/tags/hosting.md>), [next-js](<https://devfeed.tech/tags/next-js.md>), [payload](<https://devfeed.tech/tags/payload.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [updates](<https://devfeed.tech/tags/updates.md>)

## AI overview

Next.js has released security updates for versions 16.2.11 and 15.5.21, addressing high- and medium-severity vulnerabilities affecting Server Actions, middleware/proxy behavior, rewrites, redirects, image optimization, the Edge runtime, and related request handling. Teams are advised to patch their Next.js dependencies.

## Source excerpt

The July 2026 security release for Next.js is now available