Security Bulletins
Stay informed about security updates and advisories for Vercel products.
- Last updated April 19, 2026
Vercel April 2026 security incident
We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems. - Last updated December 26, 2025
Security Bulletin: CVE-2025-55184 and CVE-2025-55183
CVE-2025-55184 and CVE-2025-55183 are two important vulnerabilities in React, Next.js, and other frameworks that require immediate action - Last updated June 29, 2026
React2Shell Security Bulletin
CVE-2025-55182 is a critical vulnerability in React, Next.js, and other frameworks that requires immediate action