Security update: multiple vulnerabilities in Nuxt
UpdateUnverifiedAdded Sep 24, 2026
The Nuxt team has disclosed four security vulnerabilities. Here’s what Netlify customers need to know. Vulnerabilities CVE-2026-47200 : Route middleware bypass via island page endpoints (nuxt 3.11.0–3.21.5, 4.0.0-alpha.1–4.4.5) CVE-2026-46342 : Island response not validated against request props (nuxt 3.1.0–3.21.5, 4.0.0-alpha.1–4.4.5) CVE-2026-45670 : Dev...
Topics: SQL, Streaming, Security, Developer tools
More Netlify releases
Every Netlify release| Date | Release | Type |
|---|---|---|
| May 19 | Gemini 3.5 Flash now available in AI Gatewayunverified Update | Update |
| May 20 | Gemini 3.5 Flash now available in Agent Runnersunverified Update | Update |
| May 21 | Build Plugins: End of support for Node.js 18 + Node.js 20unverified Deprecation | Deprecation |
| May 13 | Agent Runners workflow improvementsunverified Update | Update |
| May 28 | Claude Opus 4.8 now available in AI Gateway and Agent Runnersunverified Update | Update |
| May 8 | Block project transfers out of your teamunverified Update | Update |
| May 8 | Security Update: Multiple vulnerabilities in Next.js and Reactunverified Update | Update |
| May 7 | Gemini 3.1 Flash-Lite now available in AI Gatewayunverified Preview | Preview |
Also shipped on May 19, 2026
Netlify in May 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| May 19 |  Deepgram | Gemini 3.1 Flash Lite Now Availableunverified | Deepgram | Preview |
| May 19 | Deepgram | Deprecationsunverified | Deepgram | Deprecation |
| May 19 |  DigitalOcean | DigitalOcean Kubernetes (DOKS) now supports single sign-on (SSO) with OIDC in public previewunverified | DigitalOcean | Preview |
| May 19 |  Grafana Labs | Screenshot thumbnails for browser checks in Synthetic Monitoring Timepoint Explorerunverified | Grafana Cloud | Preview |
| May 19 |  Replicate | Cog 0.20.0unverified | Cog | Update |
| May 19 |  Dify | Dify 1.14.2 - Security fixes, agent groundwork, workflow reliability, and deployment updatesunverified | Dify | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.