Simplify your stack and build anything. Or everything.
Build tomorrow’s web with a modern solution you truly own.
AGENCY TESTIMONIAL
"Payload has transformed the way our clients manage content. It's an indispensable tool for any modern agency."
Code-based nature means you can build on top of it to power anything.
Resources for Developers
Get the resources you need to start building today
It’s time to take back your content infrastructure.
Featured Customer Story
Microsoft chose Payload to tell the world about AI.
Payload 3.88.0 hardens multipart upload parsing, stops clipboard data from leaking across rows, and tightens access-control defaults for the MCP plugin's API keys.
Highlights
This release focuses on hardening — closing a multipart parsing edge case, stopping clipboard data from leaking between rows, and tightening access-control defaults for the MCP plugin — alongside a Next.js bump in our templates.
Also in this release:
- Uploads: multipart content-type parsing no longer backtracks, closing a potential denial-of-service vector
- Admin UI: clipboard prefix matching is tighter, preventing sibling row data from leaking during copy/paste
- MCP plugin: the API keys collection now ships with safer access-control defaults
- Templates: Next.js is bumped to
16.3.0
As always, you can review the complete changelog on GitHub.
