highnextCVE-2026-64642
Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
Affected versions
>= 16.0.0, < 16.2.11, fixed in 16.2.11
Published 2026-07-22. Last checked 2026-11-01. Read the source advisory
>= 16.0.0, < 16.2.11, fixed in 16.2.11Published 2026-07-22. Last checked 2026-11-01. Read the source advisory