Products: 12
    Vulnerabilities: 83
    Known Exploited: 0
    5
    Critical Level Threats
    25
    High Level Threats
    39
    Medium Level Threats
    6
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-94482

    Next.js: Denial of Service in App Router using Server Actions

    Last Modified: Oct 30, 2026
    Published: Oct 22, 2026

    CVE-2026-109375

    Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction

    Last Modified: Oct 13, 2026
    Published: Oct 12, 2026

    CVE-2026-94484

    Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of service

    Last Modified: Oct 05, 2026
    Published: Oct 02, 2026

    CVE-2026-94485

    Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypass

    Last Modified: Oct 05, 2026
    Published: Oct 02, 2026

    CVE-2026-94483

    Next.js: Server-Side Request Forgery in Image Optimization

    Last Modified: Oct 06, 2026
    Published: Oct 02, 2026
    Items Per Page
    Vercel Vulnerabilities & Security CVEs | CVE-DB