Vercel has 22 CVEs on record between 2023 and 2026. Cadence is steady at roughly 9 per quarter. The busiest recent month was May 2026 with 10. The median CVSS is 5.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-524 (4) and CWE-288 (3). Most affected products: next.js (15), ai (4), deepsec (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 9 prev 10
Products
- next.js 15
- ai 4
- deepsec 1
- ms 1
- satori 1
Worst active — by depth score
CVE-2026-44578High· 8.6Next.js is a React framework for building full-stack web applications66CVE-2025-55183Medium· 5.3An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom…54CVE-2026-44579High· 7.5Next.js is a React framework for building full-stack web applications53CVE-2026-44574High· 8.1Next.js is a React framework for building full-stack web applications45CVE-2026-44575High· 7.5Next.js is a React framework for building full-stack web applications42
Vercel vulnerabilities
CVEs affecting Vercel, newest first. Open any entry for full detail, references, and exploit status.
22 CVEsRSS
CVE-2026-109375Medium· 6.1Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs
Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the sandbox by planting links in result tarballs. Attackers controlling sandbox co…
CVE-2026-94544Medium· 4.2⚖ disputedNext.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared without separating Draft Mode requests from regular requests. An overlapping regular req…
CVE-2026-94543Medium· 5.3Next.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages Router with statically generated or Incremental Static Regeneration pages can key a res…
CVE-2026-94486Medium· 5.4⚖ disputedNext.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious webs…
CVE-2026-94485Medium· 5.3⚖ disputedNext.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model Context Protocol endpoint without reliably restricting cross-site requests. A malicious we…
CVE-2026-94484Medium· 4.8Next.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all page and statically generated or Incremental Static Regeneration routes can use a share…
CVE-2026-94483Medium· 6.5⚖ disputedNext.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote URL that matches images.remotePatterns, allowing the optimized…
CVE-2026-103004Medium· 5.3⚖ disputedNext.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params
Next.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different root params. With Cache Components enabled (cacheComponents: true), a 'use cache' function …
CVE-2026-94545Medium· 5.3PoCSatori is a library to convert HTML and CSS to SVG
Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be…
CVE-2026-8768High· 7.3A vulnerability was found in vercel ai up to 3.0.97
A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-si…
CVE-2026-8767Medium· 5.0A vulnerability has been found in vercel ai up to 3.0.97
A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection.…
CVE-2026-8769Medium· 4.3A vulnerability was determined in vercel ai up to 3.0.97
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider…
CVE-2026-45109High· 7.5Next.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing CVE-2026-44575 did not apply to middleware.ts with Turbopack. This vulnerability is fix…
CVE-2026-44579High· 7.5PoCNext.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering through the Cache Components feature can be vulnerable to connection exhaustion through cr…
CVE-2026-44578High· 8.6PoCNext.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the built-in Node.js server can be vulnerable to server-side request forgery through crafted…
CVE-2026-44577Medium· 5.9Next.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the default image loader, the Image Optimization API fetches local images entirely into memor…
CVE-2026-44575High· 7.5Next.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on middleware or proxy-based checks for authorization can allow unauthorized access throug…
CVE-2026-44574High· 8.1Next.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware to protect dynamic routes can be vulnerable to authorization bypass. In affected deploy…
CVE-2026-44573High· 7.5Next.js is a React framework for building full-stack web applications
Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router with i18n configured and middleware/proxy-based authorization can allow unauthorized acc…
CVE-2025-55183Medium· 5.3PoCAn information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom…
An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom…
CVE-2025-48985Low· 3.7A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More detail…
CVE-2017-20162Medium· 4.3A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x
A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x. This issue affects the function parse of the file index.js. The manipulation of the argument str leads to inefficient regular expression complex…