Security Bulletins

Stay informed about security updates and advisories for Vercel products.

• Last updated April 19, 2026
  Vercel April 2026 security incident We’ve identified a security incident that involved unauthorized access to certain internal Vercel systems.
• Last updated December 26, 2025
  Security Bulletin: CVE-2025-55184 and CVE-2025-55183 CVE-2025-55184 and CVE-2025-55183 are two important vulnerabilities in React, Next.js, and other frameworks that require immediate action.
• Last updated June 29, 2026
  React2Shell Security Bulletin CVE-2025-55182 is a critical vulnerability in React, Next.js, and other frameworks that requires immediate action.