---
title: Upcoming Next.js August Security Release
description: Next.js is preparing a scheduled August security release for August 26, 2026.
url: "https://nextjs.org/blog/upcoming-nextjs-security-release-august-2026"
docs_index: /docs/llms.txt
publishedAt: August 20th 2026
authors:
  - Josh Story
  - Karim Rahal
  - Sebastian Silbermann
---



As part of the [security release process we announced in July](/blog/next-security-release-program), Next.js is preparing a scheduled security release for **August 26, 2026**. This advance notice gives teams time to plan upgrades before patches are published.

## Upcoming August release

The August 26 release will address one **critical** severity vulnerability. We plan to publish **16.3.2** and **15.5.24** alongside the full advisory, including impact, affected versions, and upgrade instructions. We recommend upgrading to a patched version once the release is available.

## Our security program

We work with security researchers to secure Next.js and other open source frameworks through [Vercel's Open Source Bug Bounty](https://hackerone.com/vercel-open-source). Anyone interested in contributing to the security of eligible frameworks is encouraged to participate there.

Any questions or concerns regarding our security programs or vulnerability management can be sent to [security@vercel.com](mailto:security@vercel.com).