From the source
Modern applications rely heavily on external packages, often open source and maintained by third parties.
When new vulnerabilities - tracked as CVEs (Common Vulnerabilities and Exposures) are disclosed, teams need to act quickly before they can be exploited.
Previously, staying secure required builders to monitor CVEs constantly and manually update dependencies.
Now, Replit handles this for you.
When a new critical CVE is identified, we automatically check it against your project’s dependencies.
If a match is found, once you’ve opted in, we will: Have Replit Agent automatically prepare and test a patch Send you a direct link over email to apply the change proposed in the patch This new workflow allows you to keep your apps safe in two clicks : one to apply changes from the patch, another to republish your app.
Getting started is straightforward.
The email notification links you directly to the “ Security Center” pane of the affected project, where you can review and apply the proposed patch immediately.
If you want to inspect the changes before applying them, select “ Go to Task ” to see the full contents of the patch.
…
