Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

This is what coordinated disclosure looks like.


Given that most Next.js and RSC apps run on Vercel, I’m wondering if they’re doing the same thing. There’s no information about this in their latest blog post [0].

Update: They do similar thing. Mentioned here [1]

[0] https://nextjs.org/blog/CVE-2025-66478

[1] https://vercel.com/changelog/cve-2025-55182




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: