Releasesby GlyphSecurity Update: DoS vulnerability in Next.js and React Server Components
A denial-of-service (DoS) vulnerability (CVE-2026-23869, CVSS 7.5) has been disclosed affecting React Server Components (RSCs), a feature used by Next.js and other React metaframeworks. A malicious payload can cause excessive CPU consumption. Here's what Netlify customers need to know. Impact on Netlify Nominally, this is a server-side DoS vulnerability.
Also shipped Apr 8, 2026Netlify in April 2026 →
Custom OIDC Providers for Supabase Auth
Supabase Auth now supports custom OpenID Connect (OIDC) providers, enabling users to connect identity providers like GitHub Enterprise and regional services to their projects.
New pricing and packaging
- Changed: New tailnet plan signups are billed based on occupied user seats instead of monthly active users. Existing tailnets on a legacy plan will continue to be billed based on monthly active users. Changed: All plans can have an unlimited number of user devices in a tailnet.
Multiple Custom Domains General Availability
We’re excited to announce that __Multiple Custom Domains (MCD)__ is now __Generally Available__. With Multiple Custom Domains, Enterprise customers can support __multiple branded login experiences from a single Auth0 tenant__.
Dynamic dashboards is now generally available
Dynamic dashboards are now on by default for all Grafana Cloud users and self-managed Grafana instances. Every new and existing dashboard uses the new layout engine, editing experience, and dashboard structure automatically. Your existing dashboards are migrated to the new schema when you open them. No manual steps required.
Manage and use secrets in Grafana Cloud k6
We’re excited to announce the public preview of Secrets Management for Grafana Cloud k6, a new feature that lets you securely store and use sensitive values in your performance tests. If your tests rely on API tokens, credentials, or any other confidential data, you no longer need to hardcode them into your scripts or pass them around manually.
Event Time now available in Derived Properties
What it is: Event Time is now a selectable property in the derived property builder. You can pair it with any date-type user property to compute time differences: for instance, 'registration date - Event Time' gives you days since a user registered.
More from NetlifyEvery Netlify release →
Deploy logs streaming is now faster
Watching a deploy? You’ll notice logs now appear faster and more smoothly in the Netlify UI. We’ve reduced log delivery latency and decreased the size of the batches sent to the browser, so output streams in closer to real time. Deploy logs streaming in the Netlify UI This means less waiting and fewer large chunks of text appearing all at once.
Netlify Database GA coming soon, no new databases for now
The GA version of Netlify DB launches the week of April 20, 2026, bringing many significant improvements and it won't require installing an extension anymore. The move from the beta experience to the GA database experience is not automatic, and is not required. We will publish detailed instructions for anyone wishing to migrate.
New sorting and filter controls on the Members page
Managing team members just got easier. The Members page now includes sorting and filter controls that help you quickly find and organize your team, available for Pro and above plans.
Free unlimited seats on Pro, unlimited form submissions, & updated credit rates
We're introducing some pricing updates to our Credit-based plans. Here's a quick summary of the changes, explained more below. Unlimited seats on the Pro plan Unlimited form submissions on all Credit plans Updated credit rates for bandwidth, compute, and web requests To understand more on why we're making these changes, check out our official Netlify blog...
Claude Opus 4.7 now available in AI Gateway and Agent Runners
Anthropic's Claude Opus 4.7 model is now available through Netlify's AI Gateway and Agent Runners with zero configuration required. Use the Anthropic SDK directly in your Netlify Functions without managing API keys or authentication. The AI Gateway handles everything automatically.
Netlify CLI adds prompt-based creation and anonymous deploys
We've improved the Netlify CLI's Agent Experience to make it the fastest way for both developers and AI agents to go from idea to deployed site. Here's what's new. Create a new project from a prompt The netlify create command now builds you a new site from scratch, triggering Agent Runners: netlify create "a landing page for a SaaS product with a waitlist...
New frontend-design skill for Agent Runners
Agent Runners now include a frontend-design skill that guides AI agents toward creating distinctive, production-grade frontend interfaces with high design quality. When building web components, pages, or applications, AI agents often default to generic, cookie-cutter aesthetics.
Deploy from Codex with the Netlify Plugin
You can now deploy sites to Netlify directly from OpenAI Codex using the Netlify plugin in the Codex plugin directory. Netlify plugin in Codex Codex plugins extend Codex with apps, skills, and MCP servers, to access external tools, data, and workflows directly from your coding environment.