CVE-2025-57822
A vulnerability affecting Next.js Middleware has been addressed. It impacted versions prior to v14.2.32 and v15.4.7.
Aaron Brown, Zack Tanner, and 2 others
Changelog
Changelog, page 68
CVE-2025-55173
A vulnerability affecting Next.js Image Optimization has been addressed. It impacted versions prior to v15.4.5 and v14.2.31.Aaron Brown, Steven Salat, and 1 otherCVE-2025-57752
A vulnerability affecting Next.js Image Optimization has been addressed. It impacted versions prior to v15.4.5 and v14.2.31.Aaron Brown, Steven Salat, and 1 other
s1ngularity: supply chain attack in Nx packages
A critical vulnerability was published in Nx and some of its supporting libraries. Vercel builds are safe from this vulnerability by default.Aaron Brown, Anthony Shew, and 4 othersAnomaly alerts now in limited beta for Enterprise customers
Enterprise customers with Observability Plus can now receive anomaly alerts through the limited betaFabio Benedetti, Damien Simonin Feugas, and 5 othersDeploy Slack's Bolt.js to Vercel with
@vercel/slack-boltDeploy your Slack agent to Vercel's AI Cloud using @vercel/slack-bolt to take advantage of AI Gateway, Fluid compute, and more.Matt LewisSenior Solutions Engineer
SAML SSO is now available to Pro teams
SAML-based Single Sign-On (SAML SSO) is now available as an add-on to all Pro teams and can be configured directly in the dashboard. This includes support for major identity providers like Okta, Azure AD, and Google Workspace.Jas Garcha, Javier Bórquez, and 1 other30-day runtime log retention, now available in Observability Plus
Observability Plus subscribers now get 30 days of runtime log retention in the Logs page within the Vercel dashboardDamien Simonin Feugas, Timo Lins, and 1 other
