Vercel has announced a coordinated security release for Next.js, addressing 13 advisories covering a range of vulnerabilities. These include issues related to denial of service, middleware and proxy bypass, server-side request forgery, cache poisoning, and cross-site scripting. The release also incorporates a fix for an upstream React Server Components vulnerability.
Source: Vercel