Vercel applications are protected from Next.js August 2026 security vulnerabilities

UpdateAug 25, 2026VerifiedAdded Sep 22, 2026

Summary Two vulnerabilities affecting Next.js were disclosed in the August 2026 Security Release. Next.js applications hosted on Vercel are protected and require no customer action.

Streaming Security

Read Vercel's release notes

https://vercel.com/changelog/nextjs-august-2026-security-release

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More Vercel platform releases

Vercel platformAug 25, 2026

Speed Insights now has a free tier

Speed Insights now has a free tier that gives you a high-level performance overview from your real users. The new free tier: Is available on every plan, for any number of projects Includes 10,000 events per team, every 30 days Install Speed Insights: Previously, free Speed Insights was limited to a single project on Hobby, and upgrading to Pro meant losing...

PricingPricingBIDeveloper toolsSource

Vercel platformAug 25, 2026

Vercel Connect is now generally available

Vercel Connect is now generally available on all plans and in v0 . Instead of storing long-lived provider secrets, your code requests short-lived, scoped tokens at runtime. Deployments authenticate with their existing Vercel OIDC identity. Each token is scoped to the task, refreshed automatically, and expires on its own.

GAMCPSecurityPricingSource

Vercel platformAug 25, 2026

Chat SDK now supports Slack Enterprise Grid

Chat SDK's Slack adapter now supports Slack Enterprise Grid . Bots installed org-wide work across every workspace, with correct token resolution, tenant-scoped caches, and event retry deduplication. The adapter now stores org-wide installations by enterprise ID.

UpdateSecurityDeveloper toolsSource

Vercel platformAug 25, 2026

Vercel Connect now supports Linq

Vercel Connect now includes a managed connector for Linq , so your apps and agents can send and receive messages over iMessage, RCS, and SMS. As a Vercel Managed Connector , Vercel can create a Linq account and phone number for you, or link an existing account. You never manage credentials yourself.

UpdateAI agentsGovernanceSecuritySource

Vercel platformAug 25, 2026

Chat SDK now supports XChat

You can now build bots that hold end-to-end encrypted 1:1 and group conversations on XChat with the new XChat adapter for Chat SDK. The adapter handles all encryption, key management, and signature verification automatically. Bots can also message users first, as long as the user has encrypted chat set up and follows the bot.

PreviewStreamingSecurityDeveloper toolsSource

Vercel platformAug 26, 2026

Vercel Security Dashboard is now generally available

The Vercel Security Dashboard is now generally available on all plans, giving you one place to see your security posture across every account and project. You can access the Security Dashboard in the UI or run vercel security check in the Vercel CLI. As teams grow and coding agents make it faster to spin up projects, small misconfigurations add up quietly.

GAAI agentsSecurityPricingSource

Vercel platformAug 26, 2026

Python projects now support routing rules

Python projects can now use routing rules to set response headers or rewrite requests to internal paths, including apps built with FastAPI, Django, and Flask. The Vercel CDN evaluates rules before requests reach your application, so changes apply without a new deployment.

UpdateBIDeveloper toolsRegionsSource

Vercel platformAug 24, 2026

Elastic build machines now use Turborepo cache hits to prevent downgrades

Elastic build machines now consider Turborepo cache hits when deciding whether to use a smaller build machine. A warm-cache build no longer triggers a downgrade. A warm-cache build can use less CPU and memory than the same build with a cold cache.

UpdateSource

Also shipped on Aug 25, 2026

Google Cloud BigQueryAug 25, 2026

BigQuery data governance tags are supported in Terraform

BigQuery data governance tags are supported in Terraform. This feature is in Preview .

PreviewSQLGovernanceDeveloper toolsSource

Snowflake Snowflake Horizon CatalogAug 25, 2026

Multi-value tags (General availability)

With this release, multi-value tags are generally available. You can assign more than one string value to the same tag.

GAGovernanceSource

Snowflake Snowflake Native Apps and MarketplaceAug 25, 2026

Remote app operations for Snowflake Native Apps (Preview)

Remote app operations are now available in public preview for Snowflake Native Apps. Providers can perform on-demand operations on consumer apps, including running SQL statements ( run_sql ), retrying a failed upgrade ( retry_upgrade ), and disabling/enabling the app ( disable / enable ), all through a new system function SYSTEM$REMOTE_APP_OPERATION .

PreviewSQLSource

Snowflake SnowflakeAug 25, 2026

Remote Development with the Snowflake Extension for Visual Studio Code (Preview)

Remote Development with the Snowflake Extension for Visual Studio Code is now available in public preview.

PreviewSource

Snowflake SnowflakeAug 25, 2026

Stable egress IP addresses on Azure (Preview)

Stable egress IP addresses are now available in preview on Azure. You can generate Snowflake egress IP address ranges (as CIDR addresses) and add them to an external server's allowlist so that Snowflake can make requests to that server.

PreviewSource

Databricks LakebaseAug 25, 2026

LTAP Direct Writes accelerates synced table loads (Beta)

LTAP Direct Writes speeds up how synced tables load into Lakebase. When you create a synced table, Lakebase loads a full copy of your Unity Catalog data into your Postgres branch.

BetaGovernancePostgresObservabilitySource