Releasesby GlyphSecurity Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23864, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause memory exhaustion or excessive CPU consumption.
Also shipped Jan 26, 2026Netlify in January 2026 →
DuckDB 1.4.4 Bugfix Release
This is a bug fix release for various issues discovered after we released 1.4.3. Please excuse the erroneous release earlier. Cast Fix: Correctly handle negative exponent with a number with a decimal in VARCHAR -> INTEGER cast [Storage] Fix NULL filter check for constant segments fixing staged upload for install.duckdb.org - hopefully Remove undefined loop...
WAF Release - 2026-01-26
This week’s release introduces new detections for denial-of-service attempts targeting React CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ). Key Findings CVE-2026-23864 ( https://www.cve.org/CVERecord?id=CVE-2026-23864 ↗ ) affects react-server-dom-parcel , react-server-dom-turbopack , and react-server-dom-webpack packages.
Tailscale v1.94.1
Note : 1.94.0 was a release candidate intended for testing only. All Platforms New: tailscaled_home_derp_region_id client metrics are available. New: tailscaled_peer_relay_forwarded_packets_total and tailscaled_peer_relay_forwarded_bytes_total client metrics are available for Tailscale Peer Relays .
FigJam diagramming in Claude
Prompt to turn conversations, documents, and images into visual diagrams to break down complexity and visualize the bigger picture.
Compiler cache for builds and Workflows
Control build caching behavior on EAS with environment variables to speed up subsequent builds by up to 30%.
Webhooks Ingester
A self-hosted solution to store all your Resend webhook events in your own database.
More from NetlifyEvery Netlify release →
Agent Runners improvements
Here are some Agent Runners improvements that all people with Credit-based pricing plans can enjoy: Shareable agent run links You can now link directly to an agent run to share it with your team or bookmark for later review.
Security Update: Multiple vulnerabilities in React Router and Remix
The React Router team has disclosed six security vulnerabilities affecting React Router and Remix. Here's what Netlify customers need to know. Vulnerabilities Vulnerability: CVE-2025-61686 Path traversal Remix versions: ≤2.17.1 React Router versions & modes: 7.0.0–7.9.3<br/> All modes Vulnerability: CVE-2025-68470 Open redirect Remix versions: - React...
Claude Opus 4.6 now available in AI Gateway and Agent Runners
Anthropic's Claude Opus 4.6 model is now available through Netlify's AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Security Update: DoS vulnerability in Node.js
The Node.js team has released a security update addressing a denial-of-service vulnerability affecting applications that use async_hooks (including in dependencies). Here's what Netlify customers need to know.
Security Update: Multiple vulnerabilities in SvelteKit
The Svelte team has disclosed five CVEs affecting the Svelte and SvelteKit ecosystem. Here's what Netlify customers need to know. Vulnerabilities CVE-2026-22775 : Memory/CPU exhaustion in devalue (5.1.0–5.6.1) CVE-2026-22774 : Memory exhaustion in devalue (5.3.0–5.6.1) CVE-2026-22803 : Server crash in @sveltejs/kit (2.49.0–2.49.4) CVE-2025-67647 : Server...
GPT-5.2-Codex Now Available in AI Gateway and Agent Runners
OpenAI's GPT-5.2-Codex model is now available through Netlify's AI Gateway and Agent Runners with zero configuration required. Use the OpenAI SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Sync changes with Agent Runners
You can now sync changes from different agent runs in the Netlify dashboard. This is especially helpful if you use Netlify Drop to publish or update your project and don't use Git workflows to sychronize versions of your project. Syncing changes helps you and your whole team build and publish faster.
Play Games While Agent Runners Do the Work
While Agent Runners take care of tasks on your site, you can now play games right in the UI. We've brought the same beloved build-time games to the Agent Runner page, so you can flip tiles, plan snake, install other games, or even create your own while your agent runs in the background. A little delight, now everywhere you wait.