vercel Vulnerability Advisory Catalog

Total 57 security vulnerabilities recorded for vercel software and firmware.

← Back to All Vendors
CVE-2026-8769 MEDIUM
Component: ai

A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandle...

๐Ÿ“… 2026-05-17
CVSS 4.3 Dossier →
Component: ai

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/...

๐Ÿ“… 2026-05-17
CVSS 7.3 Dossier →
CVE-2026-8767 MEDIUM
Component: ai

A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the ...

๐Ÿ“… 2026-05-17
CVSS 5.0 Dossier →
Component: turborepo_language_server_protocol

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14000, the Turborepo LSP VS Code extension could ex...

๐Ÿ“… 2026-05-15
CVSS 7.8 Dossier →
Component: turborepo

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. Prior to 2.9.14, Turborepo's self-hosted login and SSO browser f...

๐Ÿ“… 2026-05-15
CVSS 6.5 Dossier →
CVE-2026-45772 CRITICAL
Component: turborepo

Turborepo is a high-performance build system for JavaScript and TypeScript codebases. From 1.1.0 to before 2.9.14, Turborepo can be vulnerable to arbi...

๐Ÿ“… 2026-05-15
CVSS 9.8 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.18 and 16.2.6, it was found that the fix addressing ...

๐Ÿ“… 2026-05-13
CVSS 7.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 13.4.6 to before 15.5.16 and 16.2.5, React Server Component responses can ...

๐Ÿ“… 2026-05-13
CVSS 3.7 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 13.4.0 to before 15.5.16 and 16.2.5, App Router applications that rely on ...

๐Ÿ“… 2026-05-13
CVSS 4.7 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 13.0.0 to before 15.5.16 and 16.2.5, applications that use beforeInteracti...

๐Ÿ“… 2026-05-13
CVSS 6.1 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From to before 15.5.16 and 16.2.5, applications using Partial Prerendering thr...

๐Ÿ“… 2026-05-13
CVSS 7.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications using the b...

๐Ÿ“… 2026-05-13
CVSS 8.6 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js with the de...

๐Ÿ“… 2026-05-13
CVSS 5.9 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 14.2.0 to before 15.5.16 and 16.2.5, applications using React Server Compo...

๐Ÿ“… 2026-05-13
CVSS 5.4 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 15.2.0 to before 15.5.16 and 16.2.5, App Router applications that rely on ...

๐Ÿ“… 2026-05-13
CVSS 7.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 15.4.0 to before 15.5.16 and 16.2.5, applications that rely on middleware ...

๐Ÿ“… 2026-05-13
CVSS 8.1 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the Pages Router w...

๐Ÿ“… 2026-05-13
CVSS 7.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, an external client could send a x-nex...

๐Ÿ“… 2026-05-13
CVSS 3.7 Dossier →
Component: vercel

Vercelโ€™s AI Cloud is a unified platform for building modern applications. From 50.16.0 to 52.0.0, hen the Vercel CLI runs in non-interactive mode (--...

๐Ÿ“… 2026-05-13
CVSS 5.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. Starting in version 9.5.0 and prior to versions 15.5.13 and 16.1.7, when Next.j...

๐Ÿ“… 2026-03-18
CVSS 6.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. Starting in version 10.0.0 and prior to version 16.1.7, the default Next.js ima...

๐Ÿ“… 2026-03-18
CVSS 7.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, a request containing th...

๐Ÿ“… 2026-03-18
CVSS 7.5 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, `origin: null` was trea...

๐Ÿ“… 2026-03-18
CVSS 4.3 Dossier →
Component: next.js

Next.js is a React framework for building full-stack web applications. Starting in version 16.0.1 and prior to version 16.1.7, in `next dev`, cross-si...

๐Ÿ“… 2026-03-18
CVSS 5.4 Dossier →
Page 1 of 3 (57 Total Records)