vercel
- Total products in the ecosystem
- 15
- Total vulnerabilities (90 days)
- 20
en
Verify to analyze this security profile
As of 10/23/2026, vercel recorded 20 security vulnerabilities in the last 90 days across 4 products, including 7 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, next.js had the most security vulnerabilities in the vercel ecosystem, with 18 vulnerabilities—approximately 90% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-94482Next.js: Denial of Service in App Router using Server ActionsCVE-2026-109375Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball ExtractionCVE-2026-94484Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of serviceCVE-2026-94485Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypassCVE-2026-94483Next.js: Server-Side Request Forgery in Image Optimization84 Results | Page 1 of 9
| SeverityMedium |
| SeverityMedium |
| SeverityMedium |
| SeverityHigh |
| SeverityMedium |
| SeverityMedium |
| SeverityLow |
| SeverityMedium |
| SeverityMedium |