A quick note on the latest Next.js security patch

Payload released a patch updating its Next.js peer dependency to version 15.2.3 to address a recent security vulnerability in Next.js middleware. The vulnerability does not affect Payload’s core functionality, since Payload handles authentication internally rather than through Next.js middleware.