Guides
Security guides for builders
Plain answers to the questions people ask about patches, versions and vulnerabilities.
GuideHow to check if your Next.js or Node.js version is vulnerableIdentify security risks in your application by checking your lockfile and runtime version against public vulnerability databases.Read the guide GuideHow fast should I apply security patches?Apply critical patches within days and others weekly to meet security standards like PCI DSS while keeping your application stable through regular testing.Read the guide GuideIs it safe to auto-update your app dependencies?Automatic updates keep your software secure but require a testing process to prevent breaking changes from reaching your live production environment.Read the guide GuideWhat is a CVE and do I need to care?A Common Vulnerabilities and Exposures ID identifies a security flaw in software so you can track, assess, and fix risks in your application dependencies.Read the guide