vercel

Records84All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high32CVSS 7.0–8.9

Exploited now

vercel records in CISA KEV

TI-2025-34861 Meta React Server Components Remote Code Execution Vulnerability CRITICAL 100KEV 2025-12-05

Components

Products in the NVD configurations · select one to filter the records

Next.js 63 records CRITICAL Ai 4 records HIGH Hyper 2 records HIGH Ms 2 records MEDIUM Turborepo 2 records LOW Vercel 2 records MEDIUM Pkg 1 record LOW Turborepo Language Server Protocol 1 record LOW

Records

2 records in Ms · all components

TI-2015-06844 CVE-2015-8315 · GHSA-3fx5-fwvr-xrjg

The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service…

MEDIUM 49

The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long version string, aka a "regular expression denial of service (ReDoS)."

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06954 Published 2017-01-23 Fixed in 0.7.1 CWE-1333

TI-2017-14228 CVE-2017-20162 · GHSA-w9mr-4mfr-499f

vercel ms index.js parse redos

LOW 32

A vulnerability, which was classified as problematic, has been found in vercel ms up to 1.x.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01056 Published 2023-01-05 Fixed in 2.0.0 CWE-1333

Open these records in search →

Critical	4
High	32
Medium	39
Low	8
No CVSS	1