high90%
Next.js 15.5.23 bundles vulnerable postcss and sharp dependencies
Running `npm audit` on a project created with Next.js 15.5.23 reports high severity vulnerabilities from transitive dependencies `postcss` and `sharp`. The Next.js package pins outdated versions of these packages, requiring a dependency bump to secure patch releases.