Let's talk

/ Writing

Notes from the build

What I learn shipping production frontends — React, Next.js, performance, SEO and the decisions behind them.

Next.js

Next.js October 2026 Security Update: Patching Two Critical RCEs

On October 14, 2026 Next.js shipped an out-of-band fix for two critical remote code execution bugs and a Server Actions DoS. Here's what was affected, why my portfolio on 16.2 was exposed, and the exact upgrade I ran.

5 min

  1. Next.js October 2026 Security Update: Patching Two Critical RCEs

    Next.js · Security

    5 min

  2. Next.js Security Headers on Vercel: Fixing a 25/100 Score

    Next.js · Security

    5 min

  3. Make Your Next.js Site Visible to ChatGPT, Claude & Perplexity

    AI Search · SEO

    5 min

  4. Dynamic OG Images in the Next.js App Router with Custom Fonts

    Next.js · Open Graph

    5 min

  5. Recreating Mobbin's Hero Logo Animation with GSAP

    GSAP · Animation

    7 min

  6. How I Took Core Web Vitals from 65 to 99 in Next.js

    Next.js · Core Web Vitals

    3 min

  7. SSG vs SSR vs ISR in Next.js: How I Actually Decide

    Next.js · SSG

    2 min

  8. Migrating a WordPress Site to Next.js: What I Learned Shipping Hyqoo

    Next.js · WordPress

    2 min