Next.js 16.4.0 Has a Known Security Vulnerability: Here’s How to Fix It
Two critical RCE flaws and a DoS bug hit Next.js 16.4.0. Here’s what they are, whether you’re exposed, and how to upgrade.
#nextjs
Posts tagged #nextjs
M3E Canvas: Architectural Review & Getting-Started Guide
An architectural review and getting-started guide for M3E Canvas, the browser tool that turns Material 3 Expressive sketches into AI coding prompts.
Architecture Case Study: Migrating a Developer SaaS from Serverless to a $10 VPS with Docker
How we eliminated cold starts, solved database connection pool exhaustion, reduced P99 latency by 92%, and stabilized infrastructure costs using Docker, Caddy, and a $10 VPS.
Hardening the Edge: Defeating SSRF, Redirect Traps, and Compression Bombs in Next.js Dynamic OpenGraph Generators
Why passing user-supplied avatar URLs to @vercel/og creates a critical SSRF vulnerability, and how to build a 5-layer defense in V8 Edge runtimes with magic byte validation and bounded streaming.
The Real Cost of Running a Developer Platform
Heading toward a $60/month Vercel bill I couldn't predict. Now at $14/month on a VPS I control completely.
