Vercel
35 known vulnerabilities
Top Products
Next.js is a React framework for building full-stack web applications. In versions 14.1.1 through 15.5.20 and 16.0.0 thr
Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr
Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr
Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 thr
Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr
Next.js is a React framework for building full-stack web applications. In versions 15.5.0 through 15.5.20 and 16.0.0 thr
Next.js is a React framework for building full-stack web applications. In versions 12.0.0 through 15.5.20 and 16.0.0 thr
Next.js is a React framework for building full-stack web applications. In versions 16.0.0 through 16.2.10, crafted reque
Next.js is a React framework for building full-stack web applications. In versions 13.0.0 through 15.5.20 and 16.0.0 thr
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler
A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the fil
A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/pre
Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo
Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-
Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turbo
Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was
Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React S
Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Rou
Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applica
Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications
Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-h
Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when se
Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applica
Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Rou
Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applica
Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applica
Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an exte
Vercel’s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI ru
Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 1
Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 1
Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 1
Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 1
Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 1
A denial of service vulnerability exists in Next.js versions with Partial Prerendering (PPR) enabled when running in min
A denial of service vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for t
Frequently Asked Questions
How many CVEs affect Vercel?
Vercel has 35 CVE records in our database, including 1 critical and 12 high severity vulnerabilities.
What are the most severe Vercel vulnerabilities?
Vercel has 1 critical severity (CVSS 9.0+) and 12 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Vercel vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Vercel products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Vercel Vulnerabilities
CyberStrike scans your infrastructure for Vercel vulnerabilities and provides real-time remediation guidance.
Get Started