Changelog

Vercel session tracing is now available on all plans, providing insight into steps Vercel's infrastructure took to serve a request alongside user code spans.

Vercel discovered and patched an information disclosure vulnerability in the Flags SDK (CVE-2025-46332). Users should upgrade to flags@4.0.0.

Vercel now supports the HTTP Vary header, enabling faster delivery of personalized, cached content based on location and language. Improve site performance and reduce compute automatically with Edge Network caching.

Vercel customers can now create custom WAF rules directly from the chart displayed on the Firewall tab of the Vercel dashboard.

You can now disable webhook events that Vercel sends to GitHub Actions that create many notifications on GitHub pull requests.

Vercel Marketplace now supports the Checks API, enabling providers to deliver automated post-deployment tests and surface results directly in the dashboard. Improve developer experience with seamless quality checks and actionable insights

Security researchers reviewing the Remix web framework have discovered two high-severity vulnerabilities in React Router. Vercel proactively deployed mitigation to the Vercel Firewall and Vercel customers are protected.

We've significantly improved the Project Domains page to provide a faster, cleaner, and more intuitive management experience.