Vercel vulnerabilities

Products

• Next.js 67
• Hyper 5
• Next 5
• Ai 4
• Turborepo 3
• Ms 2
• Pkg 2
• Vercel 2

Newest

• knative pkg knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion CVE-2026-54462 Fix available 6.5 MediumOctober 27, 2026
• vercel deepsec Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction CVE-2026-109375 4.9 MediumOctober 12, 2026
• payloadcms payload, @payloadcms next +1 more Payload: Untrusted redirect URL parameter exploit CVE-2026-105846 Fix available 6.1 MediumOctober 6, 2026
• vercel next.js Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass CVE-2026-94485 Fix available 6.3 MediumOctober 2, 2026
• vercel next.js Next.js: Server-Side Request Forgery in Image Optimization CVE-2026-94483 Fix available 8.3 HighOctober 2, 2026
• vercel next.js Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages CVE-2026-94544 Fix available 6.3 MediumOctober 2, 2026
• vercel next.js Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint CVE-2026-94486 Fix available 2.3 LowOctober 2, 2026
• vercel next.js next.js cache leak on warm `use cache` handlers accessing root param CVE-2026-103004 Fix available 6.3 MediumOctober 1, 2026
• vercel satori, next +1 more Satori-generated SVG has improper escaping CVE-2026-94545 Public exploitFix available 5.3 MediumSeptember 30, 2026
• vercel next.js Next.js: Denial of Service in App Router using Server Actions CVE-2026-94482 Fix available 8.2 HighSeptember 30, 2026
• alibaba-fusion next alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution CVE-2026-78180 6.9 MediumAugust 24, 2026
• vercel next.js Next.js: Denial of Service in the Image Optimization API using SVGs CVE-2026-64644 Fix available 6.3 MediumJuly 22, 2026
• vercel next.js Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale CVE-2026-64642 Fix available 8.3 HighJuly 22, 2026
• vercel @ai-sdk/harness-codex AI SDK Codex Harness Tool Relay Authorization Bypass CVE-2026-64650 6.3 MediumJuly 20, 2026
• vercel @ai-sdk/harness-opencode AI SDK OpenCode Harness Tool Relay Authorization Bypass CVE-2026-64651 6.3 MediumJuly 20, 2026
• vercel ai vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption CVE-2026-8769 Fix available 5.3 MediumMay 17, 2026
• vercel ai vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery CVE-2026-8768 6.9 MediumMay 17, 2026
• vercel ai vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection CVE-2026-8767 2.3 LowMay 17, 2026
• vercel turborepo Turborepo: Login callback CSRF/session fixation CVE-2026-45773 Fix available 5.1 MediumMay 15, 2026
• vercel turborepo, turborepo language server protocol +1 more Turborepo: VSCode Extension command injection CVE-2026-46508 8.4 HighMay 15, 2026
• @turbo codemod, vercel turborepo, @turbo workspaces +2 more Turborepo: Unexpected local code execution during Yarn Berry detection CVE-2026-45772 Fix available 0.0 NoneMay 15, 2026
• vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes CVE-2026-45109 Fix available 7.5 HighMay 11, 2026
• vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes CVE-2026-44575 Fix available 7.5 HighMay 11, 2026
• vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Middleware / Proxy bypass through dynamic route parameter injection CVE-2026-44574 Fix available 8.1 HighMay 11, 2026
• vercel Vercel: Non-interactive mode includes CLI arguments in suggested command output CVE-2026-44479 Fix available 5.5 MediumMay 7, 2026
• vercel next.js Next.js: Server-Side Request Forgery in Server Actions on Custom Servers CVE-2026-64649 Fix available 8.3 HighJanuary 28, 2026
• vercel next.js Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies CVE-2026-64647 Fix available 6.3 MediumJanuary 28, 2026
• vercel next.js Next.js: Unbounded Server Action payload in Edge runtime CVE-2026-64646 Fix available 6.3 MediumJanuary 28, 2026
• vercel next.js Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname CVE-2026-64645 Fix available 8.3 HighJanuary 28, 2026
• vercel next.js Next.js: Unauthenticated Disclosure of Internal Server Function endpoints CVE-2026-64643 Fix available 6.3 MediumJanuary 28, 2026
• vercel next.js Next.js: Cross-site scripting in App Router applications using CSP nonces CVE-2026-44581 Fix available 4.7 MediumJanuary 28, 2026
• vercel next.js Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input CVE-2026-44580 Fix available 6.1 MediumJanuary 28, 2026
• vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Denial of Service via connection exhaustion in applications using Cache Components CVE-2026-44579 Public exploitFix available 7.5 HighJanuary 28, 2026
• vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Server-side request forgery in applications using WebSocket upgrades CVE-2026-44578 Public exploitFix available EPSS 35.5% 8.6 HighJanuary 28, 2026
• vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Denial of Service in the Image Optimization API CVE-2026-44577 Fix available 5.9 MediumJanuary 28, 2026
• vercel next.js Next.js: Cache poisoning in React Server Component responses CVE-2026-44576 Fix available 5.4 MediumJanuary 28, 2026
• vercel next.js, red hat enterprise linux 10, enterprise linux 7 +7 more +9 more Next.js: Middleware / Proxy bypass in Pages Router applications using i18n CVE-2026-44573 Fix available 7.5 HighJanuary 28, 2026
• vercel next.js Next.js: Middleware / Proxy redirects can be cache-poisoned CVE-2026-44572 Fix available 3.7 LowJanuary 28, 2026
• vercel next.js Next.js: HTTP request smuggling in rewrites CVE-2026-29057 Public exploitFix available 6.3 MediumJanuary 28, 2026
• vercel next.js Next.js: Unbounded next/image disk cache growth can exhaust storage CVE-2026-27980 Fix available 6.9 MediumJanuary 28, 2026
• facebook react, meta react-server-dom-parcel, react-server-dom-turbopack +2 more +4 more Denial of Service Vulnerability in React Server Components CVE-2025-67779 Fix available EPSS 20.0% 7.5 HighDecember 11, 2025
• vercel next.js Next.js: Unbounded postponed resume buffering can lead to DoS CVE-2026-27979 Fix available 6.9 MediumDecember 11, 2025
• vercel next.js Next.js: null origin can bypass Server Actions CSRF checks CVE-2026-27978 Public exploitFix available 5.3 MediumDecember 11, 2025
• vercel next.js Next.js: null origin can bypass dev HMR websocket CSRF checks CVE-2026-27977 Fix available 2.3 LowDecember 11, 2025
• vercel next, next.js +1 more Next.js has Unbounded Memory Consumption via PPR Resume Endpoint CVE-2025-59472 Fix available 5.9 MediumDecember 11, 2025
• vercel next, next.js +1 more Next.js Vulnerable to Denial of Service with Server Components CVE-2025-59471 Fix available 5.9 MediumDecember 11, 2025
• vercel next.js Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications CVE-2026-94543 Fix available 6.3 MediumDecember 11, 2025
• vercel next.js Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service CVE-2026-94484 Fix available 6.3 MediumDecember 11, 2025
• vercel next.js Next.js: Unauthenticated Remote Code Execution on windows-hosted servers CVE-2026-75604 Public exploitFix available 9.0 CriticalDecember 11, 2025
• vercel next.js Next.js: Response Body Cache Confusion for Requests Containing Bodies CVE-2026-64648 Fix available 6.0 MediumDecember 11, 2025
• Show olderLoading…