10 min read
Nextjs CVE 94485 - Fix DynamicParams Leak in Next.js 16
10/8/2026
nextjssecuritycve
Nextjs cve 94485 affects metadata image routes in webpack builds. See who is exposed, how to audit dynamicParams, and the 16.3.8 fix.
Read article →
Engineering Articles
Free engineering articles covering React, Next.js, CSS, JavaScript and more. No signup required.
10/8/2026
Nextjs cve 94485 affects metadata image routes in webpack builds. See who is exposed, how to audit dynamicParams, and the 16.3.8 fix.
10/7/2026
node 24.19 out of memory after a 24.18.1 upgrade? Find the real runtime fix, rollback path, Node 24.21 test, and heap checks.
10/6/2026
Prisma pool timeout serverless causes P2024 in production. Learn how to size pools, fix slow queries, reuse PrismaClient, and use poolers safely.
10/5/2026
Express 5 optional routes fail with Unexpected ? after an upgrade? Replace old Express 4 syntax with braces and fix wildcards, too.
10/4/2026
Typescript 7 ts-jest fix for Jest failures: use the supported side-by-side compiler setup, keep the TS6 API alias, and verify both compilers.
10/3/2026
Next.js middleware cookie can look missing on the first render. Learn the request flow, current Next.js 15/16 behavior, and safe fixes.
10/2/2026
Nextjs dev server leak can expose local development data through the MCP endpoint. Upgrade to Next.js 16.3.8 and verify your dev setup.
9/14/2026
Next.js global error build fails with a null useContext crash in Next.js 16. Learn how to spot the framework bug and fix the build safely.
9/1/2026
Next.js AVIF optimization RCE affects self-hosted apps on 10.0.0-15.5.23 and 16.0.0-16.3.2. Get the version check, the patch, and today's interim fix.