Netlify Release notes and new features

Security Update: Cross-site scripting in TanStack Start

The TanStack team has disclosed a critical cross-site scripting (XSS) vulnerability in TanStack Start. A crafted URL can cause an affected app to return attacker-controlled HTML from its own origin, which may run attacker-supplied JavaScript in a visitor's browser. Here's what Netlify customers need to know.

• Security Update: Cross-site scripting in TanStack Start
• Security Update: Multiple vulnerabilities in Next.js
• Trust Center is now in the Netlify Dashboard