Vercel vulnerabilities, page 5
83 vulnerabilities
Known vulnerabilities in Vercel products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 16 products.
HighCVE-2026-8768vercel · aivercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgeryA vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.EPSS0.69%HighCVE-2026-8767vercel · aivercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injectionA vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.EPSS6.97%MediumCVE-2026-8769chainguard · kibana-8.19 +24 morevercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumptionA vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.EPSS0.56%HighCVE-2023-46298Npm · next +1 moreNpm nextNext.js before 13.4.20-canary.13 lacks a cache-control header and thus empty prefetch responses may sometimes be cached by a CDN, causing a denial of service to all users requesting the same URL via that CDN.EPSS1.28%