NextJS v15.5.9 is marked deprecated

I have updated to NextJS v15.5.9 as advised https://nextjs.org/blog/security-update-2025-12-11 However, in the lock file, this is marked as deprecated. But the notification points back to https://nextjs.org/blog/security-update-2025-12-11 Which tells me to update TO 15.5.9 The blog currently does NOT contain a newer post of any sort. Is this deprecation in error, or is the link incorrect?

Vercel Staff

Hi , welcome to the Vercel Community!

I'm sorry for the confusion. As per NPM https://www.npmjs.com/package/next/v/15.5.9 is not deprecated.

Can you share where you see the warning?

Also, you can always check you are on a safe version by running the npx fix-react2shell-next command.

Here’s our diff:

1- next@15.5.7:2- resolution: {integrity: sha512-+t2/0jIJ48kUpGKkdlhgkv+zPTEOoXyr60qXe68eB/pl3CMJaLeIGjzp5D6Oqt25hCBiBTt8wEeeAzfJvUKnPQ==}3+ next@15.5.9:4+ resolution: {integrity: sha512-agNLK89seZEtC5zUHwtut0+tNrc0Xw4FT/Dg+B/VLEo9pAcS9rtTKpek3V6kVcVwsB2YlqMaHdfZL4eLEVYuCg==}5engines: {node: ^18.18.0 || ^19.8.0 || >= 20.0.0}6deprecated: This version has a security vulnerability. Please upgrade to a patched version. See 7 for more details. 89

But looking at it again, I’m wondering if that actually means that pnpm failed to removed the deprecated information instead.

Vercel StaffAccepted answer

I see. Yeah, it seems like a file editing mistake because I did an installation myself from a safe version to 15.5.9 and it didn't give deprecated warning

deprecated warning

You should be safe as long as npx fix-react2shell-next is not flagging anything.

This topic is closed. It no longer accepts new replies.