Engineering Insights

WAF - WAF Release - 2025-10-13

This week’s highlights include a new JinJava rule targeting a sandbox-bypass flaw that could allow malicious template input to escape execution controls. The rule improves detection for unsafe template rendering paths. Key Findings New WAF rule deployed for JinJava (CVE-2025-59340) to block a sandbox bypass in the template engine that permits attacker-controlled type construction and arbitrary class instantiation; in vulnerable environments this can escalate to remote code execution and full ser

Node.js 24.10.0 (Current)

Arm will be @ PyTorch Conference, Join Us!

Expanded Role-Based Access Control (RBAC) for Enterprise teams

Vercel’s Role-Based Access Control (RBAC) system now supports multiple roles per user and introduces extended permissions for finer-grained access control across Enterprise teams. What’s new: The new extended permissions include: Extended permissions apply when paired with a compatible team role. Learn more in the Role-Based Access Control documentation. Read more Assign multiple roles to a single user within Enterprise teams.Multi-role support: A new team role dedicated to managing securit

Zero-configuration Flask backends

, one of the most popular web application frameworks, can now be deployed instantly on Vercel with no configuration changes needed.FlaskPython Vercel's now recognizes and deeply understands Flask applications. This update removes the need for redirects in or using the folder. framework-defined infrastructurevercel.json/api Backends on Vercel use with by default. This means your Flask app will automatically scale up and down based on traffic, and you only pay for time where your code is act

Gateway - New domain categories added

We have added three new domain categories under the Technology parent category, to better reflect online content and improve DNS filtering. New categories added Parent IDParent NameCategory IDCategory Name 26Technology194Keep Awake Software 26Technology192Remote Access 26Technology193Shareware/Freeware Refer to Gateway domain categories to learn more.

Workers - Worker startup time limit increased to 1 second

You can now upload a Worker that takes up 1 second to parse and execute its global scope. Previously, startup time was limited to 400 ms. This allows you to run Workers that import more complex packages and execute more code prior to requests being handled. For more information, see the documentation on Workers startup limits.

HYGH speeds development and campaigns with ChatGPT Business

HYGH speeds up software development and campaign delivery with ChatGPT Business, cutting turnaround times, scaling output, and driving revenue growth.