[ Vendor · 10 CVEs ]
vercel
CVEs affecting vercel published in the last 30 days, plus any vercel CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-94482 | 22 Oct 2026 | CVSS 8.2 | Next.js: Denial of Service in App Router using Server ActionsNext.js is a React framework for building full-stack web applications. From 13.0.0 until 15.5.28 and 16.4.1, crafted requests targeting App Router… | Fix |
| CVE-2026-109375 | 12 Oct 2026 | CVSS 6.1 | Vercel deepsecVercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files… | |
| CVE-2026-94543 | 2 Oct 2026 | CVSS 5.3 | Next.js has cache poisoning of SSG and ISR pages in self-hosted applicationsNext.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, self-hosted applications using the Pages… | Fix |
| CVE-2026-94544 | 2 Oct 2026 | CVSS 4.2 | Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pagesNext.js is a React framework for building full-stack web applications. From 16.3.0 until 16.3.8, pending use cache fills for the same key are shared… | Fix |
| CVE-2026-94483 | 2 Oct 2026 | CVSS 6.5 | Next.js has Server-Side Request Forgery in Image OptimizationNext.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled… | Fix |
| CVE-2026-94484 | 2 Oct 2026 | CVSS 4.8 | Next.js has cache poisoning in SSG/ISR rendering that leads to cross-user content substitution and persistent denial of serviceNext.js is a React framework for building full-stack web applications. From 15.0.0 until 15.5.27 and 16.3.8, applications with a root-level catch-all… | Fix |
| CVE-2026-94485 | 2 Oct 2026 | CVSS 5.3 | Next.js has information disclosure in App Router metadata image routes via dynamicParams bypassNext.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the `next dev` development server exposes a Model… | Fix |
| CVE-2026-94486 | 2 Oct 2026 | CVSS 5.4 | Next.js has information disclosure in development server's Model Context Protocol endpointNext.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, the next dev development server exposes a Model… | Fix |
| CVE-2026-103004 | 1 Oct 2026 | CVSS 5.3 | next.js cache leak across root param values in nested 'use cache' functionsNext.js versions from 16.3.0 to 16.3.7 warm `use cache` handlers using `next/root-params` and can leak their return value to pages with different… | Fix |
| CVE-2026-94545 | 30 Sep 2026 | CVSS 5.3 | vercel satoriSatori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain… |