Skip to content
OpenAdvisories

Vendor

vercel

76 known vulnerabilities.

vercel at a glance

Last 12 months
48
Critical · all time
2
Exploited · all time
0
Public exploit · all time
10
New vulnerabilities per month · last 12 months
0 10 20 December 2025: 0 vulnerabilities Dec 2025 January 2026: 2 vulnerabilities February 2026: 0 vulnerabilities March 2026: 5 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 19 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 11 vulnerabilities August 2026: 0 vulnerabilities September 2026: 2 vulnerabilities, 1 critical Sep October 2026: 9 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202690
Sep 202621
Aug 202600
Jul 2026110
Jun 202600
May 2026190
Apr 202600
Mar 202650
Feb 202600
Jan 202620
Dec 202500
Nov 202520
Oct 202500
Sep 202500
Aug 202530
Jul 202530
Jun 202500
May 202530
Apr 202510
Mar 202511
Feb 202500
Jan 202510
Dec 202410

Products

next.js 57 ai 3 turborepo 3 next 3 pkg 1 hyper 1 flags 1 @ai-sdk/harness-codex 1 @ai-sdk/harness-opencode 1 ms 1 vercel 1 Nuxt Devtools 1 deepsec 1 satori 1 AI SDK 1

Latest advisories

  • High max 7.8
    WID-SEC-2026-3973 1 CVE rev. 10

    Vercel Next.js: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um beliebigen Programmcode auszuführen, und um einen Denial of Service Angriff durchzuführen.

    Oracle Red Hat SUSE vercel RESF Linux Windows
    first Oct 14, 2026
  • Medium
    WID-SEC-2026-4346 0 CVEs

    Vercel Next.js: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren oder offenzulegen oder einen Denial-of-Service-Zustand auszulösen.

    vercel Windows
  • High max 8.6
    WID-SEC-2026-1401 12 CVEs rev. 6

    Vercel Next.js: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu v…

    Red Hat vercel Windows
    first May 6, 2026
  • Medium max 8.3
    WID-SEC-2026-3699 7 CVEs rev. 3

    Vercel Next.js: Mehrere Schwachstellen

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um vertrauliche Informationen offenzulegen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder Denial-of-Service-Zustände auszulösen.

    vercel Windows
    first Sep 30, 2026
  • High max 8.3
    WID-SEC-2026-2468 9 CVEs rev. 4

    Vercel Next.js: Mehrere Schwachstellen

    Ein Angreifer kann mehrere Schwachstellen in Vercel Next.js ausnutzen, um Daten zu manipulieren, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, und um Sicherheitsvorkehrungen zu umgehen.

    IBM Red Hat vercel Linux Windows
    first Jul 21, 2026
All Critical High Medium Low Exploited only Public exploit

76 results · Feed

  • High 8.2
    CVE-2026-94482

    Next.js: Denial of Service in App Router using Server Actions

    Next.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router applications with at least one Server Action can cause excessive CPU consumption and block processing of further…

    vercel next.js next npm
  • Medium 6.1
    CVE-2026-109375

    Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction

    Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox code, such as a prompt-i…

    vercel deepsec
  • Medium 6.3
    CVE-2026-94484

    Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

    Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a shared response cache key t…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-94485

    Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

    Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a dev…

    vercel next.js next npm
  • High 8.3
    CVE-2026-94483

    Next.js: Server-Side Request Forgery in Image Optimization

    Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized image fetch to reach …

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-94543

    Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applications

    Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a response cache entry with…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-94544

    Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pages

    Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular request can receive unaut…

    vercel next.js next npm
  • Low 2.3
    CVE-2026-94486

    Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpoint

    Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious website visited by a devel…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-103004

    next.js cache leak on warm `use cache` handlers accessing root param

    Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Components enabled (cacheComponents: true), a 'use cache' function that calls another 'us…

    vercel next.js next npm
  • Medium 5.3
    CVE-2026-94545 Public exploit

    Satori-generated SVG has improper escaping

    Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG ma…

    vercel next satori satori npm
  • Critical 9.0
    CVE-2026-75604 Public exploit

    Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

    Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in rou…

    vercel next.js next npm
  • High 8.3
    CVE-2026-64649

    Next.js: Server-Side Request Forgery in Server Actions on Custom Servers

    Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 through 16.2.10, when a Server Action forwards or redirects a request, an attacker can cause the server to send that outbound request to a mal…

    vercel next.js next npm
  • Medium 6.0
    CVE-2026-64648

    Next.js: Response Body Cache Confusion for Requests Containing Bodies

    Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but differ…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-64647

    Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodies

    Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a server-side fetch with a request body may return a cached response body from a different request to the same URL but differ…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-64646

    Next.js: Unbounded Server Action payload in Edge runtime

    Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consump…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-64644

    Next.js: Denial of Service in the Image Optimization API using SVGs

    Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 through 16.2.10, when self-hosting Next.js with the default image loader, the Image Optimization API can optimize remotely hosted images if co…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-64643

    Next.js: Unauthenticated Disclosure of Internal Server Function endpoints

    Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, Next.js applications using App Router, Server Actions (use server) or use cache endpoints can be disclosed bypassing any auth…

    vercel next.js next npm
  • High 8.3
    CVE-2026-64642

    Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

    Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router built with Turbopack and a single entry in config.i18n.locales can bypass middleware/pr…

    vercel next.js next npm
  • High 8.2
    CVE-2026-64641

    Next.js: Denial of Service in App Router using Server Actions

    Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 through 16.2.10, crafted requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive CPU us…

    vercel next.js next npm
  • High 8.3
    CVE-2026-64645

    Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

    Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 through 16.2.10, a rewrites() or redirects() rule that builds its external destination hostname from request-controlled input can be pointed a…

    vercel next.js next npm
  • Medium 6.3
    CVE-2026-64650

    AI SDK Codex Harness Tool Relay Authorization Bypass

    The `@ai-sdk/harness-opencode` tool is an HarnessV1 adapter backed by @openai/codex-sdk, which drives the codex command line interface. Prior to version 1.0.29, the tool relay authorizes requests from any process whose command line contains an allowed helper …

    vercel @ai-sdk/harness-codex
  • Medium 6.3
    CVE-2026-64651

    AI SDK OpenCode Harness Tool Relay Authorization Bypass

    The `@ai-sdk/harness-opencode` tool connects HarnessAgent to OpenCode through a sandboxed bridge. Prior to version 1.0.28, the tool relay authorizes requests from any process whose command line contains an allowed helper script path (`host-tool-mcp.mjs`). Thi…

    vercel @ai-sdk/harness-opencode
  • Medium 4.3
    CVE-2026-8769

    vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

    A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulat…

    vercel ai @ai-sdk/provider-utils npm
  • High 7.3
    CVE-2026-8768

    vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery

    A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. Th…

    vercel ai
  • Medium 5.0
    CVE-2026-8767

    vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection

    A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be ini…

    vercel ai
  • Medium 5.1
    CVE-2026-45773

    Turborepo: Login callback CSRF/session fixation

    Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser flows did not validate a CSRF state value on the localhost callback. While the CLI was waiting for authenticat…

    vercel turborepo turbo npm
  • High 8.4
    CVE-2026-46508

    Turborepo: VSCode Extension command injection

    Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could execute shell commands derived from workspace-controlled values. The extension used string-based command execut…

    vercel turborepo
  • None 0.0
    CVE-2026-45772

    Turborepo: Unexpected local code execution during Yarn Berry detection

    Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbitrary code execution when run in untrusted repositories that contain malicious Yarn configuration. In affecte…

    vercel @turbo turborepo workspaces npm
  • High 7.5
    CVE-2026-45109

    Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

    Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fixed in 15.5.18 and 16.2…

    vercel next.js next npm
  • Low 3.7
    CVE-2026-44582

    Next.js: Cache poisoning via collisions in React Server Component cache-busting

    Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can be vulnerable to cache poisoning in deployments that rely on shared caches with insufficient response partiti…

    vercel next.js next npm
  • Medium 4.7
    CVE-2026-44581

    Next.js: Cross-site scripting in App Router applications using CSP nonces

    Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on CSP nonces can be vulnerable to stored cross-site scripting when deployed behind shared caches. In affected v…

    vercel next.js next npm
  • Medium 6.1
    CVE-2026-44580

    Next.js: Cross-site scripting in beforeInteractive scripts with untrusted input

    Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteractive scripts together with untrusted content can be vulnerable to cross-site scripting. In affected versions, s…

    vercel next.js next npm
  • High 7.5
    CVE-2026-44579 Public exploit

    Next.js: Denial of Service via connection exhaustion in applications using Cache Components

    Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through crafted POST requests to …

    vercel next.js next npm
  • High 8.6
    CVE-2026-44578 Public exploit EPSS 36%

    Next.js: Server-side request forgery in applications using WebSocket upgrades

    Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted WebSocket upgrade req…

    vercel next.js next npm
  • Medium 5.9
    CVE-2026-44577

    Next.js: Denial of Service in the Image Optimization API

    Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memory without enforcing a …

    vercel next.js next npm
  • Medium 5.4
    CVE-2026-44576

    Next.js: Cache poisoning in React Server Component responses

    Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Components can be vulnerable to cache poisoning when shared caches do not correctly partition response variants. U…

    vercel next.js next npm
  • High 8.1
    CVE-2026-44574

    Next.js: Middleware / Proxy bypass through dynamic route parameter injection

    Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to authorization bypass. In affected deployments, specially craft…

    vercel next.js next npm
  • High 7.5
    CVE-2026-44575

    Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

    Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access through transport-specific r…

    vercel next.js next npm
  • High 7.5
    CVE-2026-44573

    Next.js: Middleware / Proxy bypass in Pages Router applications using i18n

    Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized access to protected page …

    vercel next.js next npm
  • Low 3.7
    CVE-2026-44572

    Next.js: Middleware / Proxy redirects can be cache-poisoned

    Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nextjs-data header on a normal request to a path handled by middleware that returns a redirect. When that happen…

    vercel next.js next npm