Next.js Discord

Discord Forum

https://nextjs.org/learn/dashboard-app Course's app is also affected.

Unanswered
English Shepherd posted this in #help-forum
Open in Discord
English ShepherdOP
I was using this course to learn Next.js. And when I tried to deploy my dashboard website on Vercel I got an error saying: Error: Vulnerable version of Next.js detected, please update immediately. Learn More: https://vercel.link/CVE-2025-66478. How can I update the version?

10 Replies

@English Shepherd I was using this course to learn Next.js. And when I tried to deploy my dashboard website on Vercel I got an error saying: Error: Vulnerable version of Next.js detected, please update immediately. Learn More: https://vercel.link/CVE-2025-66478. How can I update the version?
enter your package.json file. Inside this file in dependencies, you see a dependeny called next.

The use the following table to determine the new version:
npm install next@15.0.5   # for 15.0.x
npm install next@15.1.9   # for 15.1.x
npm install next@15.2.6   # for 15.2.x
npm install next@15.3.6   # for 15.3.x
npm install next@15.4.8   # for 15.4.x
npm install next@15.5.7   # for 15.5.x
npm install next@16.0.7   # for 16.0.x
 
npm install next@15.6.0-canary.58   # for 15.x canary releases
npm install next@16.1.0-canary.12   # for 16.x canary releases


Example: if you are currently on 15.2.4, then you look in the table and find the line:
npm install next@15.2.6   # for 15.2.x

Then you know, that the new version should be 15.2.6. So change it to the updated version and you are good to go
@English Shepherd It is "latest"
no its not. If you are currentoly on 15.2.4 and you change it to latest, then instead of upgrading to 15.2.6, you would upgrade to 16.0.7. So you would do a major update and as you might know: that contains breaking changes.
then write down 16.0.7 instead of latest
@B33fb0n3 then write down `16.0.7` instead of `latest`
English ShepherdOP
I got this error after changing the version:
@English Shepherd I got this error after changing the version:
add the following to your next.config.mjs:
import path from 'node:path';

/** @type {import('next').NextConfig} */
const nextConfig = {
    turbopack: {
        root: path.join(process.cwd(), '..'),
    },
};

export default nextConfig;

I assume your package.json is in /nextjs-dashboard?
And I ran npm audit fix --force. And it fixed it.