React Router 7.18 Fixes Two Bugs Its Own Patches Missed
React Router 7.18.0 closes a DoS in the manifest endpoint and an open-redirect bypass, both follow-ups to fixes shipped earlier in 2026 that didn't fully hold.
Continue reading →Continue reading →
Firebase
Firebase Crashlytics Splits System Kills From Memory Errors
On Android 17 and up, Crashlytics now gives Low Memory Kills and OutOfMemoryErrors their own separate issues instead of one shared bucket.
Vercel
Next.js Now Warns You a Patch Is Coming Before It Says Why
Vercel's new Next.js Security Release Program pre-announces patch dates and severity, then ships. Its first drop fixed 9 bugs, 4 of them high severity.