Vercel vulnerabilities
76 CVEs and advisories name Vercel as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-94482Next.js: Denial of Service in App Router using Server Actions
- CVE-2026-109375Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction
- CVE-2026-94484Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service
- CVE-2026-94485Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass
- CVE-2026-94483Next.js: Server-Side Request Forgery in Image Optimization
- CVE-2026-94543Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications
- CVE-2026-94544Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages
- CVE-2026-94486Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint
- CVE-2026-103004next.js cache leak on warm `use cache` handlers accessing root param
- CVE-2026-94545Satori-generated SVG has improper escaping
- CVE-2026-75604Next.js: Unauthenticated Remote Code Execution on windows-hosted servers
- CVE-2026-64649Next.js: Server-Side Request Forgery in Server Actions on Custom Servers
- CVE-2026-64648Next.js: Response Body Cache Confusion for Requests Containing Bodies
- CVE-2026-64647Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies
- CVE-2026-64646Next.js: Unbounded Server Action payload in Edge runtime
- CVE-2026-64644Next.js: Denial of Service in the Image Optimization API using SVGs
- CVE-2026-64643Next.js: Unauthenticated Disclosure of Internal Server Function endpoints
- CVE-2026-64642Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale
- CVE-2026-64641Next.js: Denial of Service in App Router using Server Actions
- CVE-2026-64645Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname
- CVE-2026-64650AI SDK Codex Harness Tool Relay Authorization Bypass
- CVE-2026-64651AI SDK OpenCode Harness Tool Relay Authorization Bypass
- CVE-2026-8769vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption
- CVE-2026-8768vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery
- CVE-2026-8767vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection
- CVE-2026-45773Turborepo: Login callback CSRF/session fixation
- CVE-2026-46508Turborepo: VSCode Extension command injection
- CVE-2026-45772Turborepo: Unexpected local code execution during Yarn Berry detection
- CVE-2026-45109Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes
- CVE-2026-44582Next.js: Cache poisoning via collisions in React Server Component cache-busting