PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

The Vercel OSS Bug Bounty program is now available

vercel.com | vulnerability | #bug-bounty | #cloud-security | #vulnerability-research | #web-security | #vercel
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
Published
Collected

Related coverage

vulnerability · vercel.com
The Vercel Bug Bounty Program is now publicly available
Vercel's Bug Bounty Program is now public on HackerOne, covering all Vercel products and open-source projects. Learn how to participate and report findings.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
vulnerability · vercel.com
Postmortem on Next.js Middleware bypass
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
research · vercel.com
DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities
Today we're releasing DeepsecBench, a benchmark that evaluates how well different models find security vulnerabilities in application code.
blog · vercel.com
How we run Vercel's CDN in front of Discourse
Vercel Community uses Vercel as a CDN in front of monolithic servers like Discourse or Wordpress. Use microfrontends to incrementally migrate to a new app.
Back