Critical Security Vulnerability in React Server Components
Deprecation10 months agoUnverifiedAdded Sep 24, 2026
A critical security vulnerability was identified in React Server Components affecting specific versions of react-server-dom and Next.js.
Topics: Security
More Replit releases
Every Replit releaseData Connectors
Replit Enterprise now includes native data warehouse connectors for Snowflake, Databricks, and BigQuery, allowing secure connectivity for data applications.
Fast Mode
Fast Mode is a new feature for Replit Agent that allows users to perform quick, precise adjustments to their applications.
Design Mode
Design Mode uses the Gemini 3 model to allow users to create interactive mockups and static websites in under two minutes.
Now You Can Build with Replit in ChatGPT
Users can now build, update, and deploy Replit applications directly within ChatGPT by tagging @replit in conversations.
Build AI Apps Instantly with Replit AI Integrations
Replit AI Integrations provides access to over 300 AI models directly within the Replit platform, eliminating the need for manual API key configuration.
Mobile Apps on Replit: Idea to App Store in Minutes
Replit has introduced Mobile Apps on Replit, a feature that allows users to build and publish mobile apps using natural language without native development experience.
Bring your Vercel project to Replit (in minutes)
Users can now import Vercel projects into Replit. The Replit Agent automates the setup process, including environment variable configuration and deployment.
Replit acquires OpenInt
Replit has acquired OpenInt, an integration platform for code generation. OpenInt's technology will serve as the foundation for Replit Connectors.
Also shipped on Dec 4, 2025
Replit in December 2025Adding Async Streaming to Postgres Foreign Data Wrappers
Supabase Wrappers now supports asynchronous streaming for Postgres Foreign Data Wrappers, improving performance for large analytical workloads.
Build "Sign in with Your App" using Supabase Auth
Supabase Auth now functions as an identity provider, supporting OAuth 2.1 and OpenID Connect to enable SSO for AI agents and third-party applications.
Introducing the Batch API: Simpler and more efficient for large-scale workloads
The new Batch API is an asynchronous endpoint for processing large volumes of requests. It offers higher throughput, a 12-hour completion window, and 33% cost savings compared to synchronous alternatives.
Workers - One-click Access protection for Workers now creates reusable Cloudflare Access policies
Workers applications now use reusable Cloudflare Access policies to reduce duplication and simplify access management across multiple Workers. Previously, enabling Cloudflare Access on a Worker created per-application policies, unique to each application.
- Transient storage filter in Settings: The Databases page in Settings in the MotherDuck UI now supports...
- Transient storage filter in Settings: The Databases page in Settings in the MotherDuck UI now supports filtering by storage type DESCRIBE and SUMMARIZE exports: Downloading the results of DESCRIBE and SUMMARIZE queries is now supported in the MotherDuck UI DuckLake option in the Add Database menu: MotherDuck users can create a new DuckLake in the 'Add...
Hyperdrive - Connect to remote databases during local development with wrangler dev
You can now connect directly to remote databases and databases requiring TLS with wrangler dev . This lets you run your Worker code locally while connecting to remote databases, without needing to use wrangler dev --remote .