
· Asep Alazhari · Development
Next.js RCE Patch 2026: Fix It, Then Harden Your CSP
Vercel patched two critical unauthenticated RCEs in Next.js on August 25, 2026. Here is how to upgrade safely and finally drop unsafe-inline from your CSP.

Vercel patched two critical unauthenticated RCEs in Next.js on August 25, 2026. Here is how to upgrade safely and finally drop unsafe-inline from your CSP.

SSL certificate validity just dropped to 200 days. Here's why CA/B Forum made the change and how to stay ahead using Sectigo or DigiCert.