Releasesby GlyphSecurity Update: Multiple vulnerabilities in React Router and Remix
The React Router team has disclosed six security vulnerabilities affecting React Router and Remix. Here's what Netlify customers need to know. Vulnerabilities Vulnerability: CVE-2025-61686 Path traversal Remix versions: ≤2.17.1 React Router versions & modes: 7.0.0–7.9.3<br/> All modes Vulnerability: CVE-2025-68470 Open redirect Remix versions: - React...
Also shipped Jan 19, 2026Netlify in January 2026 →
Ephemeral Sessions with Actions - General Availability
As part of our Continuous Session Protection, you can now configure ephemeral (non-persistent) sessions using Actions. This allows enterprise customers to dynamically control whether a session is stored in a persistent cookie or only in memory. Ephemeral sessions: * Exist only in memory and are cleared when the browser or app is closed.
Cloudflare Fundamentals - Enhanced HTTP/3 request cancellation visibility
Enhanced HTTP/3 request cancellation visibility Cloudflare now provides more accurate visibility into HTTP/3 client request cancellations, giving you better insight into real client behavior and reducing unnecessary load on your origins. Previously, when an HTTP/3 client cancelled a request, the cancellation was not always actioned immediately.
Dashboard operations for read-only users
Why it's changing This change ensures that read-only access is enforced consistently across the New Relic platform, maintaining uniform governance and technical integrity.
Revamped gauge visualization
We’ve reimagined the gauge visualization to provide more options and several new variations to make your dashboards more informative and more appealing. The Circular shape has been introduced as an alternative to the existing Arc gauge under the new Style option.
Inline Batching API Release
Inline batching has been released, allowing users to create batch jobs without uploading files.
More from NetlifyEvery Netlify release →
Security Update: DoS vulnerability in Node.js
The Node.js team has released a security update addressing a denial-of-service vulnerability affecting applications that use async_hooks (including in dependencies). Here's what Netlify customers need to know.
Security Update: Multiple vulnerabilities in SvelteKit
The Svelte team has disclosed five CVEs affecting the Svelte and SvelteKit ecosystem. Here's what Netlify customers need to know. Vulnerabilities CVE-2026-22775 : Memory/CPU exhaustion in devalue (5.1.0–5.6.1) CVE-2026-22774 : Memory exhaustion in devalue (5.3.0–5.6.1) CVE-2026-22803 : Server crash in @sveltejs/kit (2.49.0–2.49.4) CVE-2025-67647 : Server...
GPT-5.2-Codex Now Available in AI Gateway and Agent Runners
OpenAI's GPT-5.2-Codex model is now available through Netlify's AI Gateway and Agent Runners with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Security Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23864, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause memory exhaustion or excessive CPU consumption.
Agent Runners improvements
Here are some Agent Runners improvements that all people with Credit-based pricing plans can enjoy: Shareable agent run links You can now link directly to an agent run to share it with your team or bookmark for later review.
Play Games While Agent Runners Do the Work
While Agent Runners take care of tasks on your site, you can now play games right in the UI. We've brought the same beloved build-time games to the Agent Runner page, so you can flip tiles, plan snake, install other games, or even create your own while your agent runs in the background. A little delight, now everywhere you wait.
Prerender.io support available as new extension
The third-party Prerender.io service for advanced prerendering is now available as an extension for all Netlify customers. Previously, you needed a Netlify Pro plan or higher to set up Prerender.io with Netlify's legacy in-app prerendering feature. Prerender.io offers advanced configuration options and the Prerender.io dashboard.
Claude Opus 4.6 now available in AI Gateway and Agent Runners
Anthropic's Claude Opus 4.6 model is now available through Netlify's AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.