Vercel

Products

Exploited and recent CVEs

• CVE-2026-94482 High 8.2 Next.js: Denial of Service in App Router using Server Actions 0.4%
• CVE-2026-109375 Medium 6.1 Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction 0.3%
• CVE-2026-94484 Medium 6.3 Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service 0.2%
• CVE-2026-94485 Medium 6.3 Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass 0.2%
• CVE-2026-94483 High 8.3 Next.js: Server-Side Request Forgery in Image Optimization 0.3%
• CVE-2026-94543 Medium 6.3 Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications 0.5%
• CVE-2026-94544 Medium 6.3 Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages 0.2%
• CVE-2026-94486 Low 2.3 Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint 0.1%
• CVE-2026-103004 Medium 6.3 next.js cache leak on warm `use cache` handlers accessing root param 0.2%
• CVE-2026-94545 Medium 5.3 Satori-generated SVG has improper escaping 1.1%
• CVE-2026-94545 Medium 5.3 Satori-generated SVG has improper escaping 1.1%
• CVE-2026-75604 Critical 9.0 Next.js: Unauthenticated Remote Code Execution on windows-hosted servers 2.1%
• CVE-2026-64649 High 8.3 Next.js: Server-Side Request Forgery in Server Actions on Custom Servers 0.5%
• CVE-2026-64648 Medium 6.0 Next.js: Response Body Cache Confusion for Requests Containing Bodies 0.3%
• CVE-2026-64647 Medium 6.3 Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies 0.3%
• CVE-2026-64646 Medium 6.3 Next.js: Unbounded Server Action payload in Edge runtime 0.5%
• CVE-2026-64644 Medium 6.3 Next.js: Denial of Service in the Image Optimization API using SVGs 0.7%
• CVE-2026-64643 Medium 6.3 Next.js: Unauthenticated Disclosure of Internal Server Function endpoints 0.5%
• CVE-2026-64642 High 8.3 Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale 0.6%
• CVE-2026-64641 High 8.2 Next.js: Denial of Service in App Router using Server Actions 0.9%
• CVE-2026-64645 High 8.3 Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname 0.4%
• CVE-2026-64650 Medium 6.3 AI SDK Codex Harness Tool Relay Authorization Bypass 0.2%
• CVE-2026-64651 Medium 6.3 AI SDK OpenCode Harness Tool Relay Authorization Bypass 0.2%
• CVE-2026-8769 Medium 4.3 vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption 0.6%
• CVE-2026-8768 High 7.3 vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery 0.5%
• CVE-2026-8767 Medium 5.0 vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection 7.0%
• CVE-2026-45773 Medium 5.1 Turborepo: Login callback CSRF/session fixation 0.1%
• CVE-2026-46508 High 8.4 Turborepo: VSCode Extension command injection 0.2%
• CVE-2026-45772 None 0.0 Turborepo: Unexpected local code execution during Yarn Berry detection 0.4%
• CVE-2026-45109 High 7.5 Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes 0.9%