I saw a CTO on LinkedIn recommend switching to Next.js and the reason: no dependency on the vulnerable PHP runtime. Wooow 🤷♂️
Commit
f1d6497
Of course, Next.js has its own vulnerabilities, like every piece of software! 😄
https://nextjs.org/blog/nextjs-security-update-october-14-2026
nextjs.orgNext.js Security Update for Upstream VulnerabilitiesThe October 14, 2026 out-of-band security update for Next.js is now available
commit f1d6497