{"type":"post","id":"we-have-automatically-applied-waf-protections-for-vercel-609afc","slug":"we-have-automatically-applied-waf-protections-for-vercel-609afc","title":"We have automatically applied WAF protections for Vercel users.","description":"Better Auth released versions 1.7.16 and 1.8.0-beta.5 to address 12 security advisories across authentication, sessions, authorization, and billing.","retrieval_nugget":"Better Auth released versions 1.7.16 and 1.8.0-beta.5 to address 12 security advisories across authentication, sessions, authorization, and billing. Vercel says it has deployed free WAF rules for hosted projects, but affected applications still need patched packages and, in some cases, credential rotation or data cleanup.","published_at":"2026-11-04","updated_at":"2026-11-04","record_date":"2026-11-04","date_kind":"published_at","topics":["agent-security"],"entities":["Vercel","Better Auth","@better-auth/expo"],"related_patterns":["agent-security-moves-to-runtime-boundaries"],"novelty_label":"new_fact","what_changed":"Vercel says it deployed free WAF rules to automatically protect projects against the Better Auth vulnerabilities; no listed prior covers this bulletin.","prior_refs":[],"source_url":"https://vercel.com/kb/bulletin/better-auth-november-2026-security-release","source_urls":["https://vercel.com/kb/bulletin/better-auth-november-2026-security-release"],"schema_version":"newruntime-agent-readable-v0.2","stable_id":"post:we-have-automatically-applied-waf-protections-for-vercel-609afc","status":"published","visuals":[],"editor":{"role":"editor","name":"Andrey Reshetnikov","profile":"https://newruntime.com/owner-profile.md","profile_json":"https://newruntime.com/owner-profile.json","same_as":["https://www.linkedin.com/in/reshetnikov1/","https://t.me/lapetuse"]},"routes":{"html":"https://newruntime.com/posts/we-have-automatically-applied-waf-protections-for-vercel-609afc/","markdown":"https://newruntime.com/posts/we-have-automatically-applied-waf-protections-for-vercel-609afc.md","json":"https://newruntime.com/posts/we-have-automatically-applied-waf-protections-for-vercel-609afc.json"},"markdown_url":"https://newruntime.com/posts/we-have-automatically-applied-waf-protections-for-vercel-609afc.md","next_reads":[{"type":"topic","path":"/topics/agent-security/","url":"https://newruntime.com/topics/agent-security/","title":"Agent Security","reason":"Explore the agent-security topic hub.","media_type":"text/html","markdown_url":"https://newruntime.com/topics/agent-security.md","json_url":"https://newruntime.com/topics/agent-security.json"},{"type":"collection","path":"/posts/","url":"https://newruntime.com/posts/","title":"Field Notes","reason":"Open the latest editorial analysis.","media_type":"text/html","json_url":"https://newruntime.com/posts.json"},{"type":"collection","path":"/sources/","url":"https://newruntime.com/sources/","title":"Sources","reason":"See the original sources this archive cites.","media_type":"text/html"}]}