Netlify’s response to the critical React & Next.js security vulnerability
UpdateUnverifiedAdded Sep 24, 2026
Update (2025-12-08 22:45 UTC): Sites that have not yet upgraded to a patched version of Next.js (or other affected framework) must upgrade immediately. Following upgrade, we also recommend rotating all credentials that are scoped for access within Netlify Functions, if you have been running a vulnerable version on or after December 4th, 2025 at 1:00 PM PT.
Topics: Vector search, Security, Observability, Developer tools
More Netlify releases
Every Netlify release| Date | Release | Type |
|---|---|---|
| Dec 4 | GPT-5.1-Codex-Max now available in AI Gateway and Agent Runnersunverified Update | Update |
| Dec 1 | Netlify Vite Plugin now supports AI Gateway locallyunverified Update | Update |
| Dec 11 | Action required: React/Next.js CVE-2025-55184 and CVE-2025-55183unverified Update | Update |
| Dec 11 | GPT-5.2 and GPT-5.2-Pro now available in AI Gateway and Agent Runnersunverified Update | Update |
| Nov 24 | Claude Opus 4.5 now live in AI Gateway, plus latest Claude Code via Agent Runnersunverified Update | Update |
| Nov 21 | Projects deployed using a zip file via API now support branch deploysunverified Preview | Preview |
| Dec 16 | AI Gateway now Generally Availableunverified GA | GA |
| Dec 16 | Observability is hereunverified Update | Update |
Also shipped on Dec 3, 2025
Netlify in December 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Dec 3 |  Deepgram | EU Endpoint Now Generally Availableunverified | Deepgram | GA |
| Dec 3 |  New Relic | eAPM General Availability and eBPF Network Metrics Public Previewunverified | New Relic | GA |
| Dec 3 |  NVIDIA | NeMo NVIDIA Neural Modules 2.6.0unverified | NeMo | Update |
| Dec 3 | Deepgram | Supported APIsunverified | Deepgram | Update |
| Dec 3 | Deepgram | Configurationunverified | Deepgram | Update |
| Dec 3 |  Cloudflare | Email security - Reclassifications to Submissionsunverified | Cloudflare developer platform | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.