software

New deployments of vulnerable Next.js applications are now blocked by default

Published: (December 5, 2025 at 08:00 AM EST)
1 min read
Source: Vercel Blog

Source: Vercel Blog

Update Summary

Any new deployment containing a version of Next.js that is vulnerable to will now automatically fail to deploy on Vercel. CVE-2025-66478

We strongly recommend upgrading to a patched version regardless of your hosting provider. Learn more

This automatic protection can be disabled by setting the en…

Back to Blog

Related posts

Read more »

Introducing Platform Elements

As part of the new product, you can now use a set of prebuilt UI blocks and actions to add functionality directly to your application.Vercel for Platforms of pr...

Introducing Vercel for Platforms

You can now build platforms with the new product announced today, making it easy to create and run customer projects on behalf of your users.Vercel for Platform...