Vercel

Meta React Server Components Remote Code Execution Vulnerability

In CISA KEVRansomwarealso in 4 other products

Next.js: Server-side request forgery in applications using WebSocket upgrades

Authorization Bypass in Next.js Middleware

Meta React-server-dom-webpack: Deserialization of Untrusted Data

also in 5 other products

Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

Meta React-server-dom-parcel: Deserialization of Untrusted Data

also in 4 other products

Cache Poisoning in next.js

Meta React-server-dom-webpack: Information Disclosure

also in 4 other products

Unexpected server crash in Next.js

vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection

Next.js Server-Side Request Forgery in Server Actions

Authorization bypass in Next.js

Vercel Ms: Denial of Service

Next.js Improper Middleware Redirect Handling Leads to SSRF

Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes

Meta React-server-dom-turbopack: Uncontrolled Resource Consumption

also in 4 other products

Vercel Hyper: Code Execution

Satori-generated SVG has improper escaping

Next.js: Denial of Service in App Router using Server Actions

Vercel Next.js: Denial of Service

Librsvg: use-after-free when xml includes have duplicated entities

also in 17 other products

DOS Vulnerability in next.js

Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Next.js DoS vulnerability via cache poisoning

Next.js: Middleware / Proxy bypass in Pages Router applications using i18n