Curated security research, vulnerabilities, advisories and tools for practitioners.

#vercel

Security coverage tagged vercel.

1.

[CVE-2026-94545] Remote Code Execution in next/og ImageResponse

advisory | Critical | 2026-09-22 17:03 | CVE-2026-94545 | github.com | Original ↗ | .md | #rce | #github | #poc

2.

The Vercel Bug Bounty Program is now publicly available

vulnerability | 2026-09-24 07:00 | vercel.com | Original ↗ | .md | #bug-bounty | #cloud-security | #web-security

3.

Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers

vulnerability | 2026-09-18 00:00 | vercel.com | Original ↗ | .md | #rce | #cloud-security | #vulnerability-research

4.

$1 million hacker challenge for Vercel Sandbox

vulnerability | 2026-08-18 00:00 | vercel.com | Original ↗ | .md | #bug-bounty | #cloud-security | #web-security

5.

Everything hackable will get hacked

research | 2026-08-11 07:00 | vercel.com | Original ↗ | .md | #ai-security | #cloud-security | #web-security

6.

DeepsecBench: evaluating model performance in finding cybersecurity vulnerabilities

research | 2026-07-27 04:00 | vercel.com | Original ↗ | .md | #ai-security | #cloud-security | #vulnerability-research

7.

$170k in Bypasses: The Vercel React2Shell Challenge

blog | 2026-05-04 00:00 | hacktron.ai | Original ↗ | .md | #bug-bounty | #react2shell | #nextjs

8.

It's time to treat browser extensions like supply chain attack vectors

incident | 2026-04-25 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #third-party-risk

9.

Context.ai OAuth Token Compromise

incident | 2026-04-20 18:20 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #incident-response

10.

Bringing Security Visibility to Vercel with Wiz

blog | 2026-04-09 12:00 | wiz.io | Original ↗ | .md | #cloud-security | #integration | #vercel

11.

How we run Vercel's CDN in front of Discourse

blog | 2026-03-10 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #cdn

12.

Security boundaries in agentic architectures

research | 2026-02-24 00:00 | vercel.com | Original ↗ | .md | #ai-security | #cloud-security | #web-security

13.

The Vercel OSS Bug Bounty program is now available

vulnerability | 2026-02-03 00:00 | vercel.com | Original ↗ | .md | #bug-bounty | #cloud-security | #vulnerability-research

14.

Our $1 million hacker challenge for React2Shell

vulnerability | 2025-12-19 00:00 | vercel.com | Original ↗ | .md | #bug-bounty | #rce | #cloud-security

15.

Security through design: Creating the improved Firewall experience

blog | 2025-11-24 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #firewall

16.

Vercel achieves TISAX AL2 compliance to serve automotive partners

blog | 2025-10-29 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #compliance | #web-security

17.

Critical npm supply chain attack response – September 8, 2025

incident | 2025-09-08 00:00 | vercel.com | Original ↗ | .md | #supply-chain | #cloud-security | #incident-response

18.

The three types of AI bot traffic and how to handle them

blog | 2025-08-13 00:00 | vercel.com | Original ↗ | .md | #ai-security | #cloud-security | #web-security

19.

Vercel security roundup: improved bot defenses, DoS mitigations, and insights

blog | 2025-05-23 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #firewall

20.

Bot Protection: One-click managed ruleset now in public beta

blog | 2025-04-23 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #vercel

21.

Protectd: Evolving Vercel’s always-on denial-of-service mitigations

blog | 2025-04-07 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #ddos

22.

Postmortem on Next.js Middleware bypass

vulnerability | 2025-03-25 00:00 | CVE-2025-29927 | vercel.com | Original ↗ | .md | #cloud-security | #vulnerability-research | #incident-response

23.

Vercel security roundup: Faster defenses and better visibility for your apps

blog | 2025-02-21 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #vercel

24.

Mitigating Denial of Wallet risks with Vercel

blog | 2025-01-24 00:00 | vercel.com | Original ↗ | .md | #cloud | #cloud-security | #web-security

25.

Life of a Vercel request: Securing your app's traffic with Vercel

blog | 2024-12-05 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #firewall

26.

Preventing infrastructure abuse with Vercel Firewall

blog | 2024-09-24 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #ddos

27.

Protecting your app (and wallet) against malicious traffic

blog | 2024-08-02 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #web-security | #firewall

28.

PCI compliance for ecommerce

blog | 2024-02-07 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #compliance | #web-security

29.

Vercel achieves ISO 27001:2013 certification to further strengthen commitment to security

blog | 2023-09-12 00:00 | vercel.com | Original ↗ | .md | #cloud-security | #compliance | #web-security

30.

Introducing Vercel Firewall and Vercel Secure Compute

blog | 2023-05-02 00:00 | vercel.com | Original ↗ | .md | #cloud | #cloud-security | #web-security