Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 4 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 401,113All CVEsplus 19,119 rejected
- 470Last 24 hours2,798 in the last 7 days
- 16,884Last 30 days1,550 of them critical
- 1,768Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 1 | 13 | 28 | 5 | 1 | 48 | 76 |
| 2025 | 1 | 1 | 7 | 5 | 0 | 14 | 28 |
| 2024 | 0 | 5 | 2 | 0 | 0 | 7 | 14 |
| 2023 | 0 | 0 | 1 | 0 | 0 | 1 | 7 |
| 2022 | 0 | 0 | 2 | 0 | 0 | 2 | 6 |
| 2021 | 0 | 2 | 1 | 0 | 0 | 3 | 4 |
| 2020 | 0 | 0 | 1 | 0 | 0 | 1 | 1 |
| Title | ||
|---|---|---|
| CVE-2026-94482 | Next.js: Denial of Service in App Router using Server Actionsvercel · next.js | High8.2 |
| CVE-2026-109375 | Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball ExtractionVercel · deepsec | Medium4.9 |
| CVE-2026-94484 | Next.js: Cache poisoning in Next.js SSG/ISR rendering leads to cross-user content substitution and persistent denial of servicevercel · next.js | Medium6.3 |
| CVE-2026-94485 | Next.js: Information disclosure in Next.js App Router metadata image routes via dynamicParams bypassvercel · next.js | Medium6.3 |
| CVE-2026-94483 | Next.js: Server-Side Request Forgery in Image Optimizationvercel · next.js | High8.3 |
| CVE-2026-94543 | Next.js: Cache poisoning of SSG and ISR pages in self-hosted Next.js applicationsvercel · next.js | Medium6.3 |
| CVE-2026-94544 | Next.js: Pending `use cache` fill can leak Draft Mode content into regular responses and persisted pagesvercel · next.js | Medium6.3 |
| CVE-2026-94486 | Next.js: Information disclosure in the Next.js development server's Model Context Protocol endpointvercel · next.js | Low2.3 |
| CVE-2026-103004 | next.js cache leak on warm `use cache` handlers accessing root paramvercel · next.js | Medium6.3 |
| CVE-2026-94545 | Satori-generated SVG has improper escapingvercel · satori | Medium5.3 |
| CVE-2026-75604 | Next.js: Unauthenticated Remote Code Execution on windows-hosted serversvercel · next.js | Critical9.0 |
| CVE-2026-64649 | Next.js: Server-Side Request Forgery in Server Actions on Custom Serversvercel · next.js | High8.3 |
| CVE-2026-64648 | Next.js: Response Body Cache Confusion for Requests Containing Bodiesvercel · next.js | Medium6.0 |
| CVE-2026-64647 | Next.js: Response Body Cache Confusion with Invalid UTF-8 Request Bodiesvercel · next.js | Medium6.3 |
| CVE-2026-64646 | Next.js: Unbounded Server Action payload in Edge runtimevercel · next.js | Medium6.3 |
| CVE-2026-64644 | Next.js: Denial of Service in the Image Optimization API using SVGsvercel · next.js | Medium6.3 |
| CVE-2026-64643 | Next.js: Unauthenticated Disclosure of Internal Server Function endpointsvercel · next.js | Medium6.3 |
| CVE-2026-64642 | Next.js: Middleware / Proxy bypass in App Router applications using Turbopack and single localevercel · next.js | High8.3 |
| CVE-2026-64641 | Next.js: Denial of Service in App Router using Server Actionsvercel · next.js | High8.2 |
| CVE-2026-64645 | Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostnamevercel · next.js | High8.3 |
| CVE-2026-64650 | AI SDK Codex Harness Tool Relay Authorization Bypassvercel · @ai-sdk/harness-codex | Medium6.3 |
| CVE-2026-64651 | AI SDK OpenCode Harness Tool Relay Authorization Bypassvercel · @ai-sdk/harness-opencode | Medium6.3 |
| CVE-2026-8769 | vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumptionvercel · ai | Medium5.3 |
| CVE-2026-8768 | vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgeryvercel · ai | Medium6.9 |
| CVE-2026-8767 | vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injectionvercel · ai | Low2.3 |
| CVE-2026-45773 | Turborepo: Login callback CSRF/session fixationvercel · turborepo | Medium5.1 |
| CVE-2026-46508 | Turborepo: VSCode Extension command injectionvercel · turborepo | High8.4 |
| CVE-2026-45772 | Turborepo: Unexpected local code execution during Yarn Berry detectionvercel · turborepo | None0.0 |
| CVE-2026-45109 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routesvercel · next.js | High7.5 |
| CVE-2026-44582 | Next.js: Cache poisoning via collisions in React Server Component cache-bustingvercel · next.js | Low3.7 |
| CVE-2026-44581 | Next.js: Cross-site scripting in App Router applications using CSP noncesvercel · next.js | Medium4.7 |
| CVE-2026-44580 | Next.js: Cross-site scripting in beforeInteractive scripts with untrusted inputvercel · next.js | Medium6.1 |
| CVE-2026-44579 | Next.js: Denial of Service via connection exhaustion in applications using Cache Componentsvercel · next.js | High7.5 |
| CVE-2026-44578 | Next.js: Server-side request forgery in applications using WebSocket upgradesvercel · next.js | High8.6 |
| CVE-2026-44577 | Next.js: Denial of Service in the Image Optimization APIvercel · next.js | Medium5.9 |
| CVE-2026-44576 | Next.js: Cache poisoning in React Server Component responsesvercel · next.js | Medium5.4 |
| CVE-2026-44574 | Next.js: Middleware / Proxy bypass through dynamic route parameter injectionvercel · next.js | High8.1 |
| CVE-2026-44575 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routesvercel · next.js | High7.5 |
| CVE-2026-44573 | Next.js: Middleware / Proxy bypass in Pages Router applications using i18nvercel · next.js | High7.5 |
| CVE-2026-44572 | Next.js: Middleware / Proxy redirects can be cache-poisonedvercel · next.js | Low3.7 |
| CVE-2026-44479 | Vercel: Non-interactive mode includes CLI arguments in suggested command outputvercel · vercel | Medium5.5 |
| CVE-2026-29057 | Next.js: HTTP request smuggling in rewritesvercel · next.js | Medium6.3 |
| CVE-2026-27980 | Next.js: Unbounded next/image disk cache growth can exhaust storagevercel · next.js | Medium6.9 |
| CVE-2026-27979 | Next.js: Unbounded postponed resume buffering can lead to DoSvercel · next.js | Medium6.9 |
| CVE-2026-27978 | Next.js: null origin can bypass Server Actions CSRF checksvercel · next.js | Medium5.3 |
| CVE-2026-27977 | Next.js: null origin can bypass dev HMR websocket CSRF checksvercel · next.js | Low2.3 |
| CVE-2025-59472 | A denial of service vulnerability exists in Next.js versions with Partial Prerendering (PPR) enabled when running in minimal mode. The PPR resume endpoint…vercel · next | Medium5.9 |
| CVE-2025-59471 | A denial of service vulnerability exists in self-hosted Next.js applications that have `remotePatterns` configured for the Image Optimizer. The image…vercel · next | Medium5.9 |
| CVE-2025-48985 | A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype…Vercel · AI SDK | Low3.7 |
| CVE-2025-52662 | A vulnerability in Nuxt DevTools has been fixed in version **2.6.4***. This issue may have allowed Nuxt auth token extraction via XSS under certain…Vercel · Nuxt Devtools | Medium6.9 |