
Supabase Patches 44 Postgres CVEs, Some Fixes Need Your Action
Supabase rolls Postgres 15.19/17.11 out to every project starting today, closing 44 CVEs and flagging four breaking changes that need manual follow-up.
The Archive
Independent platform news and analysis for builders.

Supabase rolls Postgres 15.19/17.11 out to every project starting today, closing 44 CVEs and flagging four breaking changes that need manual follow-up.

Firebase's Admin SDKs finished shipping App Check replay protection, but a FlutterFire bug stops iOS and macOS from getting the short-lived tokens it needs.

Supabase's logs ingest is now metered, $0.50 per GB over 20 GB on paid plans, but billing doesn't start until early 2027.

Netlify's Sept. 24 dashboard update shows production deploys, previews and agent runs in one filterable feed instead of three separate pages.

Vercel removed its per-plan cap on Blob stores Sept 23, then made creating one a billed operation, a week after cutting Hobby's storage grace period.

Next.js shipped an unscheduled critical RCE patch for ImageResponse (CVSS 9.5), breaking the monthly security cadence Vercel set up in July.

Vercel now shows billable duration and CPU minutes per deployment, months into complaints about Turbo build machines defaulting on and inflating invoices.

Netlify's AI Gateway added TypeSafe's Jev, a model returning typed choices and probabilities instead of text, a day after Vercel shipped it too.

A Sept 15 release lets Cloud Functions for Firebase (2nd gen) fire onUserCreated and onUserDeleted natively, closing a gap open since 2nd gen launched.