Security update: multiple vulnerabilities in React Router
UpdateUnverifiedAdded Sep 24, 2026
The React Router team has disclosed seven security vulnerabilities. Here’s what Netlify customers need to know. Vulnerabilities Vulnerability: GHSA-8x6r-g9mw-2r78 , DoS via __manifest endpoint Package: react-router Affected versions: 7.0.0–7.14.x Fixed in: 7.15.0 Vulnerability: GHSA-rxv8-25v2-qmq8 , DoS via single-fetch request body Package: react-router...
Topics: Security, Developer tools
More Netlify releases
Every Netlify release| Date | Release | Type |
|---|---|---|
| Jun 3 | Angular v22 is now supportedunverified Update | Update |
| May 28 | Claude Opus 4.8 now available in AI Gateway and Agent Runnersunverified Update | Update |
| Jun 9 | Netlify is now in the Cursor marketplaceunverified Update | Update |
| Jun 9 | Claude Fable 5 now available in AI Gatewayunverified Update | Update |
| Jun 12 | Project labels are now available on Prounverified Update | Update |
| Jun 12 | Environment variable size limit removed for Serverless Functionsunverified Update | Update |
| May 21 | Build Plugins: End of support for Node.js 18 + Node.js 20unverified Deprecation | Deprecation |
| May 20 | Gemini 3.5 Flash now available in Agent Runnersunverified Update | Update |
Also shipped on Jun 2, 2026
Netlify in June 2026| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Jun 2 |  Okta | Dashboard Navigation & IA Refresh is now in Betaunverified | Auth0 | Beta |
| Jun 2 | Okta | M2M Support for Third-Party Applications is now Generally Availableunverified | Auth0 | GA |
| Jun 2 | Okta | Dashboard Search for Applications Now in Betaunverified | Auth0 | Beta |
| Jun 2 |  MotherDuck | - DuckDB 1.5.3 support: MotherDuck supports DuckDB 1.5.3 unverified | MotherDuck | Update |
| Jun 2 |  fal | Filter and Sort Appsunverified | fal | Update |
| Jun 2 |  Hex | Hex is now in Codexunverified | Hex | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.