VE
Vendor
vercel
85
CVEs
1
On KEV
11
New 30D
Products
NE10.0
next.js
vercel
65 CVEs1 on KEV8 new
DE6.1
deepsec
Vercel
1 CVEs0 on KEV1 new
NE5.3
next
vercel
1 CVEs0 on KEV1 new
SA5.3
satori
vercel
1 CVEs0 on KEV1 new
AI7.5
ai
vercel
4 CVEs0 on KEV0 new
TU9.8
turborepo
vercel
3 CVEs0 on KEV0 new
HY9.8
Hyper
Vercel
2 CVEs0 on KEV0 new
MS7.5
ms
vercel
2 CVEs0 on KEV0 new
VE5.5
vercel
vercel
2 CVEs0 on KEV0 new
AI6.3
@ai-sdk/harness-codex
vercel
1 CVEs0 on KEV0 new
AI6.3
@ai-sdk/harness-opencode
vercel
1 CVEs0 on KEV0 new
PK7.8
Pkg
Vercel
1 CVEs0 on KEV0 new
TL7.8
Turborepo Language Server Protocol
Vercel
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-94482 New | NE next.js vercel | 8.2 | Oct 22 | Next.js: Denial of Service in App Router using Server Actions |
| CVE-2026-109375 | DE deepsec Vercel | 6.1 | Oct 12 | Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction |
| CVE-2026-94484 | NE next.js vercel | 4.8 | Oct 2 | Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service |
| CVE-2026-94485 | NE next.js vercel | 5.3 | Oct 2 | Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass |
| CVE-2026-94483 | NE next.js vercel | 6.5 | Oct 2 | Next.js: Server-Side Request Forgery in Image Optimization |
| CVE-2026-94543 | NE next.js vercel | 5.3 | Oct 2 | Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications |
| CVE-2026-94544 | NE next.js vercel | 4.2 | Oct 2 | Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages |
| CVE-2026-94486 | NE next.js vercel | 5.4 | Oct 2 | Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint |
| CVE-2026-103004 | NE next.js vercel | 5.3 | Oct 1 | next.js cache leak on warm `use cache` handlers accessing root param |
| CVE-2026-94545 | SA satori vercel | 5.3 | Sep 30 | Satori-generated SVG has improper escaping |
| CVE-2026-75604 | NE next.js vercel | 9.0 | Sep 1 | Next.js: Unauthenticated Remote Code Execution on windows-hosted servers |
| CVE-2026-64649 | NE next.js vercel | 6.5 | Jul 27 | Next.js: Server-Side Request Forgery in Server Actions on Custom Servers |
| CVE-2026-64648 | NE next.js vercel | 5.4 | Jul 27 | Next.js: Response Body Cache Confusion for Requests Containing Bodies |
| CVE-2026-64647 | NE next.js vercel | 5.4 | Jul 27 | Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies |
| CVE-2026-64646 | NE next.js vercel | 5.3 | Jul 27 | Next.js: Unbounded Server Action payload in Edge runtime |
| CVE-2026-64644 | NE next.js vercel | 5.3 | Jul 27 | Next.js: Denial of Service in the Image Optimization API using SVGs |
| CVE-2026-64643 | NE next.js vercel | 5.3 | Jul 27 | Next.js: Unauthenticated Disclosure of Internal Server Function endpoints |
| CVE-2026-64642 | NE next.js vercel | 8.2 | Jul 27 | Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale |
| CVE-2026-64641 | NE next.js vercel | 7.5 | Jul 27 | Next.js: Denial of Service in App Router using Server Actions |
| CVE-2026-64645 | NE next.js vercel | 6.1 | Jul 27 | Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname |
| CVE-2026-64650 | AI @ai-sdk/harness-codex vercel | 6.3 | Jul 20 | AI SDK Codex Harness Tool Relay Authorization Bypass |
| CVE-2026-64651 | AI @ai-sdk/harness-opencode vercel | 6.3 | Jul 20 | AI SDK OpenCode Harness Tool Relay Authorization Bypass |
| CVE-2026-8769 | AI ai vercel | 6.5 | May 17 | vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption |
| CVE-2026-8768 | AI ai vercel | 7.3 | May 17 | vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery |
| CVE-2026-8767 | AI ai vercel | 7.5 | May 17 | vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection |
| CVE-2026-45773 | TU turborepo vercel | 6.5 | May 15 | Turborepo: Login callback CSRF/session fixation |
| CVE-2026-46508 | TU turborepo vercel | 7.8 | May 15 | Turborepo: VSCode Extension command injection |
| CVE-2026-45772 | TU turborepo vercel | 9.8 | May 15 | Turborepo: Unexpected local code execution during Yarn Berry detection |
| CVE-2026-45109 | NE next.js vercel | 7.5 | May 13 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes |
| CVE-2026-44582 | NE next.js vercel | 3.7 | May 13 | Next.js: Cache poisoning via collisions in React Server Component cache-busting |
| CVE-2026-44581 | NE next.js vercel | 4.7 | May 13 | Next.js: Cross-site scripting in App Router applications using CSP nonces |
| CVE-2026-44580 | NE next.js vercel | 6.1 | May 13 | Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input |
| CVE-2026-44579 | NE next.js vercel | 7.5 | May 13 | Next.js: Denial of Service via connection exhaustion in applications using Cache Components |
| CVE-2026-44578 | NE next.js vercel | 8.6 | May 13 | Next.js: Server-side request forgery in applications using WebSocket upgrades |
| CVE-2026-44577 | NE next.js vercel | 5.9 | May 13 | Next.js: Denial of Service in the Image Optimization API |
| CVE-2026-44576 | NE next.js vercel | 5.4 | May 13 | Next.js: Cache poisoning in React Server Component responses |
| CVE-2026-44574 | NE next.js vercel | 8.1 | May 13 | Next.js: Middleware / Proxy bypass through dynamic route parameter injection |
| CVE-2026-44575 | NE next.js vercel | 7.5 | May 13 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes |
| CVE-2026-44573 | NE next.js vercel | 7.5 | May 13 | Next.js: Middleware / Proxy bypass in Pages Router applications using i18n |
| CVE-2026-44572 | NE next.js vercel | 5.9 | May 13 | Next.js: Middleware / Proxy redirects can be cache-poisoned |
| CVE-2026-44479 | VE vercel vercel | 5.5 | May 13 | Vercel: Non-interactive mode includes CLI arguments in suggested command output |
| CVE-2026-29057 | NE next.js vercel | 6.5 | Mar 18 | Next.js: HTTP request smuggling in rewrites |
| CVE-2026-27980 | NE next.js vercel | 7.5 | Mar 18 | Next.js: Unbounded next/image disk cache growth can exhaust storage |
| CVE-2026-27979 | NE next.js vercel | 7.5 | Mar 18 | Next.js: Unbounded postponed resume buffering can lead to DoS |
| CVE-2026-27978 | NE next.js vercel | 4.3 | Mar 17 | Next.js: null origin can bypass Server Actions CSRF checks |
| CVE-2026-27977 | NE next.js vercel | 5.4 | Mar 17 | Next.js: null origin can bypass dev HMR websocket CSRF checks |
| CVE-2025-59472 | NE Next.js Vercel | 7.5 | Jan 26 | A denial of service vulnerability exists in Next.js versions with Partial Prerendering (PPR) enabled when running in minimal mode |
| CVE-2025-59471 | NE Next.js Vercel | 7.5 | Jan 26 | A denial of service vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for the Image Optimizer |
| CVE-2025-67779 | NE Next.js Vercel | 7.5 | Dec 12 | It was found that the fix addressing CVE-2025-55184 in React Server Components was incomplete and does not prevent a denial of service attack in a specific case |
| CVE-2025-55184 | NE Next.js Vercel | 7.5 | Dec 11 | A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following… |
| CVE-2025-55183 | NE Next.js Vercel | 5.3 | Dec 11 | An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the… |
| CVE-2025-55182 RansomwareIn wildKEV | NE Next.js Vercel | 10.0 | Dec 3 | Meta React Server Components Remote Code Execution Vulnerability |
| CVE-2025-48985 | AI AI Vercel | 5.3 | Nov 7 | A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta |
| CVE-2025-57822 | NE Next.js Vercel | 8.2 | Aug 29 | Next.js is a React framework for building full-stack web applications |
| CVE-2025-57752 | NE Next.js Vercel | 6.2 | Aug 29 | Next.js is a React framework for building full-stack web applications |
| CVE-2025-55173 | NE Next.js Vercel | 4.3 | Aug 29 | Next.js is a React framework for building full-stack web applications |
| CVE-2025-7074 | HY Hyper Vercel | 7.5 | Jul 5 | A vulnerability classified as problematic has been found in vercel hyper up to 3.4.1 |
| CVE-2025-49826 | NE Next.js Vercel | 7.5 | Jul 3 | Next.js is a React framework for building full-stack web applications |
| CVE-2025-49005 | NE Next.js Vercel | 3.7 | Jul 3 | Next.js is a React framework for building full-stack web applications |
| CVE-2025-48068 | NE Next.js Vercel | 4.3 | May 30 | Next.js is a React framework for building full-stack web applications |