Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both enabling unauthenticated remote code execution (RCE). The…
Tag: Vercel
AWS, Google, and Vercel Patch Agent Flaws Allowing Tool Execution Without Model Authorization
Security researchers have uncovered a class of vulnerabilities in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel that allow attackers…
Vercel Patches Critical Next.js Vulnerabilities
Vercel released security patches for two critical Next.js vulnerabilities enabling unauthenticated RCE. The company moved its monthly security release forward by one…
Vercel AI SDK Harness Vulnerabilities
The Vercel AI SDK harness packages for Codex and OpenCode had authorization bypass vulnerabilities, fixed in versions 1.0.29 and 1.0.28 respectively.
SleeperGem Attack: Three Malicious RubyGems Packages Target Developer Machines
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
Vercel: Cloud Platform
Vercel is a cloud platform for static sites and serverless functions. The SleeperGem malware checks for Vercel environment variables to avoid running…