Next.js Patches Two Critical RCEs, One With No Workaround
Next.js 16.4.1 and 15.5.28 fix two unauthenticated RCEs and a Server Actions DoS. Netlify says its hosting limits the damage.
Continue reading →Continue reading →
Supabase
Supabase Status Page Drops SMS and Webhook Alerts, Resubscribe
Supabase moved its status page to incident.io on Oct. 8. SMS, Slack, webhook and RSS subscribers must resubscribe, and SMS and webhook alerts are gone.
Supabase
Supabase Drops Four TLS 1.2 Ciphers on Its APIs as Soon as Nov. 10
Supabase will stop offering four CBC-mode TLS 1.2 ciphers on project HTTP APIs. Clients that support nothing newer will lose access to Auth, Storage and more.