← All news
Online IncomeAugust 4, 2026 · 1 min read
Update Vendored Lodash and Tokio
Mehmet Kocabaşupdated: August 4, 2026
TL;DR
Next.js updates vendored lodash to 4.17.23 and tokio to 1.47.3.
Source summary
Update vendored lodash to 4.17.23 to fix CVE-2025-13465 : #91558.
Update tokio from 1.43.0 to 1.47.3: #90945
Source
Next.js releasesOpen the original source