Security Update: Multiple vulnerabilities in Next.js and React
UpdateUnverifiedAdded Sep 24, 2026
The Next.js and React teams have disclosed twelve security vulnerabilities: one in React Server Components and eleven in Next.js, all patched on May 6, 2026, plus a follow-up advisory on May 7. The issues span middleware/proxy bypass, cross-site scripting (XSS), server-side request forgery (SSRF), cache poisoning, and denial of service (DoS).
Topics: Streaming, Security, Developer tools
More Netlify releases
Every Netlify release| Date | Release | Type |
|---|---|---|
| May 8 | Block project transfers out of your teamunverified Update | Update |
| May 7 | Gemini 3.1 Flash-Lite now available in AI Gatewayunverified Preview | Preview |
| May 5 | OpenAI GPT-5.5 Instant now available in AI Gatewayunverified Update | Update |
| May 13 | Agent Runners workflow improvementsunverified Update | Update |
| May 2 | Netlify Identity package update: CSRF protection with new `verifyRequestOrigin` helperunverified Update | Update |
| May 1 | New `netlify logs` CLI commandunverified Update | Update |
| Apr 29 | Deploy to Netlify with Stripe Projectsunverified Update | Update |
| Apr 28 | Netlify Database is now generally availableunverified GA | GA |
Also shipped on May 8, 2026
Netlify in May 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| May 8 |  Neon | Faster writes with full-page writes disabled, snapshot pricing in effect, organization-wide two-factor authentication release - May 08, 2026unverified | Neon | Pricing |
| May 8 |  Cloudflare | Workers AI - Planned model deprecations on Workers AIunverified | Cloudflare developer platform | Deprecation |
| May 8 |  Shopify | Target discounts to specific marketsunverified | Shopify developer platform | Pricing |
| May 8 |  Mem0 | Memory Decay: Recently-Used Memories Surface Higher Per-project search-time ranking bias that boosts...unverified | Mem0 platform | Update |
| May 8 |  Estuary | Estuary Flow 0.6.8unverified | Estuary Flow | Update |
| May 8 |  Sigma Computing | What's new in Sigmaunverified | Sigma | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.