Supabase
Supabase Stops Honoring Your Pinned Extension Versions
Starting August 5, Supabase ignores explicit version numbers on Postgres extensions and installs the default version instead, closing a security gap.
Topic
Security
7 articles tagged Security.
Vercel
Vercel Puts Internal Apps and AI Agents Behind Your Identity Provider
Vercel Passport reached general availability July 31, gating internal apps and AI agents behind Okta, Entra ID, Auth0 or any OIDC provider.
Netlify
Netlify Makes New Projects Private by Default, Not Existing Ones
New Netlify teams on Credit-based plans now get private projects automatically. Teams that signed up before July 28 keep the old public-by-default behavior.
Netlify
React Router 7.18 Fixes Two Bugs Its Own Patches Missed
React Router 7.18.0 closes a DoS in the manifest endpoint and an open-redirect bypass, both follow-ups to fixes shipped earlier in 2026 that didn't fully hold.
Vercel
Next.js Now Warns You a Patch Is Coming Before It Says Why
Vercel's new Next.js Security Release Program pre-announces patch dates and severity, then ships. Its first drop fixed 9 bugs, 4 of them high severity.
Vercel
Vercel's AI SDK Now Catches MCP Tools That Change After Approval
Vercel's AI SDK adds fingerprintTools and detectToolDrift to catch MCP servers that silently swap a tool's description or schema after an agent trusts it.
Vercel
Vercel Stops Printing Your Secrets Into Build Logs
Vercel now masks Sensitive Environment Variable values in build output automatically, closing a leak into logs teams routinely share and store.