-
Next.js November 3 Security Release: 7 Medium Vulnerabilities Incoming
Vercel has announced a scheduled Next.js security release for November 3, 2026, addressing seven medium-severity vulnerabilities. Here is everything you need to know to prepare your apps before the patches drop.
-
Payload CMS v4.0.0-beta.6 Released: Lexical 0.53.0 Upgrade, Multi-Tenant Fix, and Accessibility Improvements
Payload CMS v4.0.0-beta.6 dropped on October 29, 2026, bringing a breaking Lexical 0.53.0 upgrade, multi-tenant duplicate menu action fix, accessibility workflow improvements, and a bump to Sharp 0.35.5.
-
WordPress 7.1.4 RCE Vulnerability Now Under Active Exploitation: 18,500+ Attacks Recorded
Attackers began exploiting the WordPress 7.1.4 RCE race condition vulnerability within hours of patching, with over 18,500 attack attempts recorded in 21 hours. Update your WordPress sites immediately.
-
Next.js 16.4 Released: Cache Components Now Default, Rust React Compiler, and AI-Powered Agent Upgrades
Next.js 16.4 is here with Cache Components now recommended for every app, an improved Rust React Compiler with 30% less memory usage, AI-powered agent upgrade tooling, lazy server HMR, smaller Turbopack bundles, and React 19.3 support.
-
WordPress 7.1.4 Emergency Security Release: 22 Vulnerabilities Fixed — Update Now
WordPress 7.1.4 was released on October 28, 2026, patching 22 security vulnerabilities including a critical RCE race condition in the core updater. Update your WordPress sites immediately.
-
Payload CMS v3.92.0 Released: Security Fixes, Node.js Minimum Bump, and Stable Branch Updates
Payload CMS v3.92.0 is out on the stable 3.x branch, bringing a critical undici security fix, a Node.js minimum version bump to 22.23.4, and a range of bug fixes for MongoDB, Drizzle, and the admin UI. Here’s everything you need to know before upgrading.
-
Payload CMS v4.0.0-beta.4 Released: Accessibility Overhaul, TanStack 3x Speed Boost, and Node.js 24 Requirement
Payload CMS v4.0.0-beta.4 dropped on October 22, 2026, delivering a sweeping accessibility overhaul, up to 3x faster TanStack Start dev loads, critical bug fixes, and a breaking bump to Node.js 24.22.1 minimum.
-
Next.js 15 Reaches End of Life: What You Need to Know and How to Upgrade to Next.js 16
Next.js 15 officially reached End of Life on October 21, 2026, ending two years of maintenance support. Here’s what that means for your apps and how to upgrade to Next.js 16 safely.
-
Payload CMS v4.0.0-beta.3 Released: Cache Components Support, React Flight for TanStack, and Drizzle Performance Gains
Payload CMS v4.0.0-beta.3 landed on October 19, 2026, bringing Cache Components support for Next.js, React Flight integration for TanStack Start, Drizzle locale index performance gains, and a suite of UI and localization bug fixes.
-
Payload CMS v4.0.0-beta.3 Released: Cache Components Support, React Flight for TanStack, and Drizzle Performance Gains
Payload CMS v4.0.0-beta.3 landed on October 19, 2026, introducing Cache Components support, a React Flight refactor for TanStack Start (breaking change), Drizzle performance improvements, and several UI bug fixes.