Catalog / Next.js16.3.325 Aug 2026yesterdaysecurityfixedOriginal notesThis release contains security fixes for the following advisories: Critical: Unauthenticated Remote Code Execution on windows-hosted servers Unauthenticated Remote Code Execution in Image Optimization API when AVIF files are used Previous: 15.5.24