Vercel
Next.js Patch Fixes Cross-Tenant Data Leak in use cache
Upgrade to Next.js 16.4.5 or 15.5.29 if you use Cache Components with tenant or user-keyed use cache. Seven bugs fixed, one rated High.
Topic
Vercel
42 articles tagged Vercel.
Vercel
Vercel's Free Next.js Data Cache Becomes Billed Runtime Cache
Check Data Cache usage in Observability before Hobby teams migrate Nov. 29, when reads and writes start billing at $0.40 and $4.00 per million.
Vercel
Vercel Makes Node.js 26 the Default, and fetch Now Speaks HTTP/2
Vercel made Node.js 26 LTS generally available Oct. 29 and the default for new projects. Its fetch now negotiates HTTP/2, with an opt-out for Functions.
Vercel
Vercel CI Enters Beta and Runs Only the Tasks a Push Affects
Vercel launched CI in beta on all plans Oct. 28. It reads turbo.json, runs affected tasks on separate machines and cut Vercel's own push-to-pass time 2-6x.
Vercel
Vercel Now Shows Which Pages AI Bots Crawl and Fetch
Vercel Observability added an AI Traffic view that splits verified AI bot requests into crawls, assistant retrievals, Markdown requests and errors.
Vercel
Vercel Connect Now Mints a Separate Stripe Key for Each Agent
Vercel Connect can create a restricted Stripe API key per agent or task, so agents stop running on a full-access secret key. Vercel announced it Oct. 23.
Vercel
Node.js Brotli Bug Allows RCE, and Vercel's WAF Only Covers Inbound
Node.js fixed a high-severity Brotli decoder flaw, CVE-2026-111497. Vercel's WAF blocks inbound attacks but not responses a function fetches.
Vercel
Vercel WebSockets Go GA After 300 Million Connections
Vercel made WebSocket support in Functions generally available Oct. 20, saying its CDN has served 300 million connections since the June beta.
Vercel
Vercel Daemons Put Long-Running Queue Workers on Vercel
Vercel Daemons, in public beta Oct. 15, run Celery, BullMQ and Temporal workers as always-on containers with no HTTP server.
Vercel
Python on Vercel Is Generally Available, With Six SDKs
Vercel declared Python support generally available on Oct. 15, with automatic FastAPI, Flask and Django detection and six Python SDKs.
Vercel
Next.js Patches Two Critical RCEs, One With No Workaround
Next.js 16.4.1 and 15.5.28 fix two unauthenticated RCEs and a Server Actions DoS. Netlify says its hosting limits the damage.
Vercel
Vercel Bills Existing Pro Teams for Deployment Storage
Vercel will charge all Pro teams $0.10 per GB-month for deployment storage and delete deployments older than 30 days starting October 23.
Vercel
Vercel Confirms a KVM Zero-Day Found by Its Sandbox Bounty
A researcher says he escaped a guest VM to host root. Vercel CEO Guillermo Rauch confirmed the KVM zero-day and promised a full write-up.
Vercel
Vercel's CDN Stops Caching Any Response That Varies on Cookie
Vercel's CDN now refuses to cache responses with Vary: Cookie, so affected routes miss on every request. Two fixes, depending on whether content varies.
Vercel
Vercel Uncaps Blob Stores, Then Meters Creating One
Vercel removed its per-plan cap on Blob stores Sept 23, then made creating one a billed operation, a week after cutting Hobby's storage grace period.
Vercel
Next.js ImageResponse Bug Forces an Off-Schedule Critical Patch
Next.js shipped an unscheduled critical RCE patch for ImageResponse (CVSS 9.5), breaking the monthly security cadence Vercel set up in July.
Vercel
Vercel Shows the CPU-Minute Math Behind the Surprise Bills
Vercel now shows billable duration and CPU minutes per deployment, months into complaints about Turbo build machines defaulting on and inflating invoices.
Netlify
Netlify's AI Gateway Gets a Model Built to Decide, Not Chat
Netlify's AI Gateway added TypeSafe's Jev, a model returning typed choices and probabilities instead of text, a day after Vercel shipped it too.
Vercel
Vercel Cuts Hobby Deployment Grace Period From 30 Days to Zero
Vercel now deletes Hobby deployments over the shared 10GB cap immediately, ending the 30-day grace period and removing preview-deploy protections.
Vercel
Vercel Password Protection Now Costs $20 a Project, Not $150
Vercel replaced its $150-a-month team-wide add-on with $20-per-project Password Protection pricing on Pro, ending a bundle that priced every project at once.
Vercel
GitHub Copilot Joins Vercel's AI SDK on Someone Else's Protocol
Vercel's AI SDK harness layer now runs GitHub Copilot, not through a custom integration but the Agent Client Protocol GitHub added to Copilot CLI in January.
Vercel
Vercel Sandbox Is Now One of Eight Places to Run Cursor's Agents
Cursor's Cloud Agents can now execute inside Vercel Sandbox, but Cursor shipped the identical integration for seven other infrastructure vendors the same week.
Netlify
Netlify Widens Its AI Model Lineup, but Not Its Gateway's Reach
Netlify added Claude Fable 5.1 and Gemini 3.8 Flash to AI Gateway and Agent Runners, but independent comparisons still favor Vercel's broader gateway.
Vercel
Vercel Opens a Private Lane to AWS Databases for Pro Teams
Vercel brings AWS PrivateLink to Pro and Enterprise, letting Functions reach RDS, Aurora and Neon without a public-internet hop.
Vercel
Vercel's CLI Now Touches DNS, but Refuses to Act Alone
Vercel CLI adds commands for DNS records, domain renewal and project pause, but it declines destructive changes without a confirmation prompt.
Vercel
Next.js Patches Two Unauthenticated RCEs in a Single Release
Two critical unauthenticated RCE bugs, one in AVIF image handling and one Windows-only, forced Next.js to patch a day early.
Vercel
Vercel Speed Insights No Longer Disappears When You Upgrade
Vercel made Speed Insights free on every plan for any number of projects and renamed the paid tier Speed Insights Plus, ending a Hobby-only free tier.
Vercel
Vercel Puts $1M on the Line to Prove Its Sandbox Holds
Vercel is offering hackers up to $50,000 per bug to break Sandbox isolation, weeks after OpenAI agents escaped a sandbox and breached Hugging Face.
Vercel
Vercel Container Registry No Longer Needs Raw Docker Commands
A new vercel vcr command group builds, pushes and manages container images from the terminal, instead of routing everything through raw Docker.
Vercel
Vercel Cuts Off GitHub and Google Logins for Enterprise Teams
Vercel's Enterprise Managed Users reached general availability August 11, forcing SAML-only sign-in and directory-managed accounts on company domains.
Vercel
Vercel's Sandbox Now Preinstalls Claude Code and Codex by Default
Vercel Sandbox now defaults to an open-source image with Claude Code, Codex and opencode preinstalled, replacing its old fixed Node and Python runtimes.
Vercel
Vercel Patches Sandbox Bug That Let Code Fake Tool Calls
A flaw in Vercel AI SDK's Codex and OpenCode harnesses let sandboxed code invoke host tools without the model ever generating the call.
Vercel
Vercel-Led Standard Lets AI Agents Carry Skills Between Tools
Agent Plugins 1.0, backed by Vercel, OpenAI, Amazon, Google, Microsoft and Cursor, packages agent skills and MCP configs into one portable format.
Vercel
Vercel's MCP Servers Ditch Session State for the New Spec
Vercel's hosted MCP servers and the mcp-handler library now serve the stateless 2026-07-28 spec, no client-side changes required.
Vercel
Vercel Puts Internal Apps and AI Agents Behind Your Identity Provider
Vercel Passport reached general availability July 31, gating internal apps and AI agents behind Okta, Entra ID, Auth0 or any OIDC provider.
Vercel
Vercel Now Lets You Sign In With ChatGPT
A new beta login option lets developers authenticate to Vercel and v0 with a ChatGPT account, or connect the two from inside ChatGPT itself.
Vercel
Next.js Now Warns You a Patch Is Coming Before It Says Why
Vercel's new Next.js Security Release Program pre-announces patch dates and severity, then ships. Its first drop fixed 9 bugs, 4 of them high severity.
Vercel
Vercel's AI SDK Now Catches MCP Tools That Change After Approval
Vercel's AI SDK adds fingerprintTools and detectToolDrift to catch MCP servers that silently swap a tool's description or schema after an agent trusts it.
Vercel
Vercel Stops Printing Your Secrets Into Build Logs
Vercel now masks Sensitive Environment Variable values in build output automatically, closing a leak into logs teams routinely share and store.
Vercel
Vercel Redacts Build-Log Secrets After Its April Breach
Vercel now masks long Sensitive environment variable values in build logs, closing a leak path the April Context.ai breach didn't touch.
Vercel
Vercel Now Runs Rails, Django and Go Apps From a Plain Dockerfile
Vercel Functions now build and autoscale any Dockerfile-based backend, from Rails to Go, the same way it deploys a Next.js app.
Vercel
Vercel Puts Your Whole Stack in One Project, One Preview URL
Vercel Services, now in beta, deploys a frontend and backend together in one project with a single preview URL and private service-to-service calls.