Unified security actions dashboard
Vercel now provides a unified dashboard that surfaces critical security issues requiring action and groups affected projects by type of vulnerability. The dashboard automatically detects unpatched dependencies, misconfigurations, and other security risks, offering both one-click automated fixes and manual remediation guidance to help teams secure their projects faster.
Vercel now provides that surfaces any security issues requiring action from your team. When a critical vulnerability or security-related task is detected, the dashboard automatically groups your affected projects and guides you through the steps needed to secure them.a unified dashboard
This view appears as a banner whenever action is required, and can be accessed anytime through the dashboard search.
Most CVEs are handled automatically through WAF rules and other protections, but when user action is needed, they will appear here.
The unified dashboard helps teams act quickly during critical moments, consolidate required fixes in one place, and maintain a stronger security posture across all projects.
Explore the dashboard to .view any required updates
When the platform identifies a vulnerability or configuration that cannot be fully mitigated by Vercel’s autonomous protections, it’s surfaced here with clear instructions.Automatic detection of security vulnerabilities that require user intervention -
Current categories include unpatched dependencies, manual fix required, unprotected preview deployments. Additional groups will appear over time as new protections and checks are added.Project grouping based on required actions -
When possible, .Support for both automated remediation - Vercel Agent offers one-click automated upgrades and PRs
For cases requiring manual updates or where GitHub access isn’t available, we provide direct instructions such as: Support for manual remediation -
npx fix-react2shell-next
Stay secure with less effort
Source: original entry ↗
More from Vercel
Follow Vercel to get its new changes in your feed and email digest.
OpenAI Decisions API now available on AI Gateway
OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.
Timestamp attributes now supported in Vercel Flags
Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.
Glyph Cluster now available in stealth on AI Gateway
Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.