Next.js July 2026 security release: 9 CVEs patched in 16.2.11 and 15.5.21

Next.js July 2026 security release: 9 CVEs patched in 16.2.11 and 15.5.21 Summary. Vercel published the first scheduled Next.js security release on 20 July 2026, covering 9 CVEs: 4 rated high severity