What Does Next.js 16.3.8 Fix? 7 Security BugsNext.js 16.3.8 (30 Sep 2026) covers image SSRF and cache bugs. CVE-2026-94545, the next/og RCE, was patched in 16.3.6 and is not a 16.3.8 fix.3 Oct 20268 min read→
