Vercel now provides a unified dashboard that surfaces any security issues requiring action from your team. When a critical vulnerability or security-related task is detected, the dashboard automatically groups your affected projects and guides you through the steps needed to secure them.
This view appears as a banner whenever action is required, and can be accessed anytime through the dashboard search.
Most CVEs are handled automatically through WAF rules and other protections, but when user action is needed, they will appear here.
Automatic detection of security vulnerabilities that require user intervention - When the platform identifies a vulnerability or configuration that cannot be fully mitigated by Vercel’s autonomous protections, it’s surfaced here with clear instructions.
Project grouping based on required actions - Current categories include unpatched dependencies, manual fix required, unprotected preview deployments. Additional groups will appear over time as new protections and checks are added.
Support for both automated remediation - When possible, Vercel Agent offers one-click automated upgrades and PRs.
Support for manual remediation - For cases requiring manual updates or where GitHub access isn’t available, we provide direct instructions such as:
npx fix-react2shell-next
Copy link to headingStay secure with less effort
The unified dashboard helps teams act quickly during critical moments, consolidate required fixes in one place, and maintain a stronger security posture across all projects.
Explore the dashboard to view any required updates.