Changelog

A cache poisoning vulnerability affecting Next.js App Router >=15.3.0 < 15.3.3 / Vercel CLI 41.4.1–42.2.0 has been resolved. The issue allowed page requests for HTML content to return a React Server Component (RSC) payload instead.

A vulnerability affecting Next.js has been addressed. It impacted versions >=15.1.0 <15.1.8 and involved a cache poisoning bug leading to a Denial of Service (DoS) condition.

We’ve launched a new usage dashboard for Pro teams to analyze Vercel usage and costs with detailed breakdowns and export options.

Vercel now detects and deploys Nitro, a server toolkit for building webservers, with zero configuration.

You can now subscribe to webhook events for deeper visibility into domain operations on Vercel. These events make it easier to automate domain workflows, especially in multi-tenant platforms or when managing a large number of domains.

Vercel Queues is a message queue service for Vercel apps, now in Limited Beta. It enables background task processing using an append-only log for reliability, with support for pub/sub messaging, streaming, and built-in OIDC authentication.

Vercel Agent is an AI-powered assistant built into the Vercel dashboard that automatically analyzes your application performance and security data and makes recommends. Available now in Limited Beta.

Vercel BotID is now generally available. BotID is an advanced bot detection package powered by Kasada.