I got an email from Vercel urging to upgrade Next.js based project 3 days ago. POC was published 2 days ago. Today I've checked my logs and I could already see attack attempts.

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 11 months ago*

Renovate can flag CVEs in its pull requests, if you just want to check versions

  • source
  • parent