Releasesby GlyphSecurity Update: Multiple vulnerabilities in SvelteKit
The Svelte team has disclosed five CVEs affecting the Svelte and SvelteKit ecosystem. Here's what Netlify customers need to know. Vulnerabilities CVE-2026-22775 : Memory/CPU exhaustion in devalue (5.1.0–5.6.1) CVE-2026-22774 : Memory exhaustion in devalue (5.3.0–5.6.1) CVE-2026-22803 : Server crash in @sveltejs/kit (2.49.0–2.49.4) CVE-2025-67647 : Server...
Also shipped Jan 15, 2026Netlify in January 2026 →
Mobile Apps on Replit: Idea to App Store in Minutes
Replit has introduced Mobile Apps on Replit, a feature that allows users to build and publish mobile apps using natural language without native development experience.
Announcing New Models and Expanded Availability
Voyage AI introduced the Voyage 4 embedding model series with shared embedding spaces and the voyage-multimodal-3.5 model with video retrieval support. The models are now available on MongoDB Atlas and GCP.
The Voyage 4 model family: shared embedding space with MoE architecture
The Voyage 4 series features a shared embedding space for cross-model compatibility. The flagship voyage-4-large model uses a mixture-of-experts architecture to improve retrieval accuracy while reducing costs.
voyage-multimodal-3.5: a new multimodal retrieval frontier with video support
The voyage-multimodal-3.5 model adds support for embedding video frames alongside text and images. It also supports Matryoshka embeddings for flexible dimensionality.
Stop AI slop: Run evals with LLM-as-a-Judge
PostHog now provides automated evaluation tools that use LLMs to score generative AI outputs based on criteria like relevance and helpfulness. It includes pre-built templates for common use cases.
WAF Release - 2026-01-15
This week's release focuses on improvements to existing detections to enhance coverage. Key Findings Existing rule enhancements have been deployed to improve detection resilience against SQL Injection.
More from NetlifyEvery Netlify release →
Security Update: DoS vulnerability in Node.js
The Node.js team has released a security update addressing a denial-of-service vulnerability affecting applications that use async_hooks (including in dependencies). Here's what Netlify customers need to know.
GPT-5.2-Codex Now Available in AI Gateway and Agent Runners
OpenAI's GPT-5.2-Codex model is now available through Netlify's AI Gateway and Agent Runners with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Security Update: Multiple vulnerabilities in React Router and Remix
The React Router team has disclosed six security vulnerabilities affecting React Router and Remix. Here's what Netlify customers need to know. Vulnerabilities Vulnerability: CVE-2025-61686 Path traversal Remix versions: ≤2.17.1 React Router versions & modes: 7.0.0–7.9.3<br/> All modes Vulnerability: CVE-2025-68470 Open redirect Remix versions: - React...
Play Games While Agent Runners Do the Work
While Agent Runners take care of tasks on your site, you can now play games right in the UI. We've brought the same beloved build-time games to the Agent Runner page, so you can flip tiles, plan snake, install other games, or even create your own while your agent runs in the background. A little delight, now everywhere you wait.
Prerender.io support available as new extension
The third-party Prerender.io service for advanced prerendering is now available as an extension for all Netlify customers. Previously, you needed a Netlify Pro plan or higher to set up Prerender.io with Netlify's legacy in-app prerendering feature. Prerender.io offers advanced configuration options and the Prerender.io dashboard.
Security Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23864, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause memory exhaustion or excessive CPU consumption.
Agent Runners improvements
Here are some Agent Runners improvements that all people with Credit-based pricing plans can enjoy: Shareable agent run links You can now link directly to an agent run to share it with your team or bookmark for later review.
Claude Opus 4.6 now available in AI Gateway and Agent Runners
Anthropic's Claude Opus 4.6 model is now available through Netlify's AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.