Next.js Patches 9 CVEs in v16.2.11 and v15.5.21
Next.js shipped v16.2.11 and v15.5.21 on July 20, 2026, fixing 9 CVEs: 4 high-severity SSRF/DoS/bypass bugs and 5 medium ones. Here's what to patch first.
- Developer Tools
- Software Engineering
- Security
Every story we have covered, newest first.
Next.js shipped v16.2.11 and v15.5.21 on July 20, 2026, fixing 9 CVEs: 4 high-severity SSRF/DoS/bypass bugs and 5 medium ones. Here's what to patch first.
GitHub Models shuts down for good on July 30, 2026. What breaks, the brownout schedule, and how to move free-tier API calls to Azure AI Foundry or Copilot.
Next.js formalized a monthly security release program on July 13, 2026. Here's what the July 20 patch for 16.2 and 15.5 means for your upgrade plan.
Anthropic folds Claude Fable 5 into Max and Team Premium plans on July 20, 2026, at 50% of limits. Here's the pricing math for developers.
Cloudflare added wrangler flagship commands on July 16, 2026. Here's how CLI-managed feature flags, rollouts and Worker bindings work today.
Moonshot AI's Kimi K3 is a 2.8T open-weight MoE model with a 1M-token context and $3/$15 per-million pricing. Here's what changes for developers.
VS Code 1.128 lets one Claude agent session hold several chats running in parallel. Here is how multi-chat sessions, forking and quick chats work.
GitHub Copilot now bills in token-priced AI Credits, not premium requests. Here is what changed and what Visual Studio's July update now tracks.
Meta's Muse Spark 1.1 API charges $1.25/$4.25 per million tokens and drops into the OpenAI SDK. Here is what changes for developers and how it compares.
SpaceXAI and Cursor jointly trained Grok 4.5 on real coding sessions. Here is the pricing, the token-efficiency claim and what changes for agent workflows.
OpenAI's GPT-5.6 family is now generally available. Here is what Sol, Terra and Luna cost, how the tiers differ and what changes for developers.
The Model Context Protocol's 2026-07-28 spec removes sessions, adds MCP Apps and formalizes deprecations. What server authors need to change.