Next.js ImageResponse Bug Forces an Off-Schedule Critical Patch
Next.js shipped an unscheduled critical RCE patch for ImageResponse (CVSS 9.5), breaking the monthly security cadence Vercel set up in July.
Continue reading →Next.js shipped an unscheduled critical RCE patch for ImageResponse (CVSS 9.5), breaking the monthly security cadence Vercel set up in July.
Continue reading →
Vercel now shows billable duration and CPU minutes per deployment, months into complaints about Turbo build machines defaulting on and inflating invoices.

Netlify's AI Gateway added TypeSafe's Jev, a model returning typed choices and probabilities instead of text, a day after Vercel shipped it too.