Is there a fix available for CVE-2026-23864 in Next.js v14?
Next 14 is at end of life and there is no fix, you will need to upgrade to Next 15
This CVE only affects App router though, if you’re using Pages router and have no React Server Components then you are safe on 14