Vercel vulnerabilities
76 CVEs and advisories name Vercel as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-29927Authorization Bypass in Next.js Middleware
- CVE-2024-56332Next.js Vulnerable to Denial of Service (DoS) with Server Actions
- CVE-2024-51479Authorization bypass in Next.js
- CVE-2024-47831Next.js image optimization has Denial of Service condition
- CVE-2024-46982Cache Poisoning in next.js
- CVE-2024-39693Next.js Denial of Service (DoS) condition
- CVE-2024-34351Next.js Server-Side Request Forgery in Server Actions
- CVE-2024-34350Next.js Vulnerable to HTTP Request Smuggling
- CVE-2024-24828Local Privilege Escalation in execuatables bundled by pkg
- CVE-2017-20162vercel ms index.js parse redos
- CVE-2022-36046Unexpected server crash in Next.js version 12.2.3
- CVE-2022-23646Improper CSP in Image Optimization API for Next.js
- CVE-2021-43803Unexpected server crash in Next.js
- CVE-2021-39178XSS in Image Optimization API for Next.js versions between 10.0.0 and 11.1.0
- CVE-2021-37699Open Redirect in Next.js versions below 11.1.0
- CVE-2020-15242Open Redirect in Next.js