Vercel is a platform for deploying modern web applications with speed and simplicity, offering developers a seamless experience for hosting and scaling their projects. With features like instant deployment, serverless functions, and global CDN, Vercel empowers developers to focus on building great user experiences without worrying about infrastructure management.

Vercel

Next.js has shipped a coordinated security release (versions 15.5.18 and 16.2.6) addressing 13 advisories. Vulnerabilities include middleware and proxy bypass (App Router segment-prefetch, Pages Router i18n), denial of service in React Server Components (CVE-2026-23870), DoS via Cache Components and Image Optimization API, server-side request forgery via WebSocket upgrades, cache poisoning, and cross-site scripting via CSP nonces or beforeInteractive scripts. Patched React versions (19.0.6, 19.1.7, 19.2.6) are also available. Upgrading immediately is the only complete mitigation; WAF rules are not sufficient.

Next.js May 2026 security release

A squad for all things pentesting, web, APIs, infrastructure and networks mainly but also some social engineering, mobile, cloud, DevOps and WiFi pentesting too.