- How many CVEs does vercel have?
- vercel has 80 published CVE records since 2017, including 56 in the last two years.
- How many vercel CVEs are in CISA KEV?
- Yes — 1 of vercel's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
- Which vercel products have the most CVEs?
- The vercel products with the most published CVEs are next.js, next, ai, turborepo, hyper.
- What are the most common weakness types in vercel CVEs?
- vercel's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)), CWE-400 (Uncontrolled Resource Consumption), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).
- Are there public exploits for vercel vulnerabilities?
- Yes — 17 of vercel's CVEs have a known public exploit.
- How many critical vercel vulnerabilities are there?
- vercel has 3 critical and 32 high-severity CVEs.
- What is the average severity of vercel CVEs?
- The average CVSS base score across vercel's scored CVEs is 6.4.