Bug bounty program
VE
Vercel
Most upvoted reports16
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Revoked deployment collaborator regains access to private comments after active collaborator interactionAnalysed#3852102 | Input Validation and Logic | 2026-10-29 | $1,026 | 55 |
| Open redirect vuln on login#608031 | Open Redirect | – | – | 45 |
| through %09 Character the attacker is able to steal Github Token [ Account Takeover ]#763058 | Open Redirect | – | – | 44 |
| Gitlab Oauth Misconfiguration Lead To Account Takeover#541701 | No weakness recorded | – | – | 39 |
| Open Redirect on Gitllab Oauth leading to Acount Takeover#677617 | Open Redirect | – | – | 34 |
| CSRF On Connect Account With Github Lead To Account Takeover#542047 | Cross-Site Request Forgery | – | – | 29 |
| Stored XSS on Zeit.co user profile#541737 | Cross-site Scripting | – | – | 21 |
| Stored Cross-site scripting#541710 | Cross-site Scripting | – | – | 13 |
| User personal data disclosure via API#630235 | Information Disclosure | – | – | 12 |
| [Fix Bypass #541631] Open redirect on Signup#541948 | Open Redirect | – | – | 9 |
Subdomains1,259
| Name | Scope | First seen |
|---|---|---|
| turbo-site-git-main.vercel.shgit | Not in the scope | 2026-11-14 |
| turbo-site-git-sokra-improve-tree-walking.vercel.shgit | Not in the scope | 2026-11-14 |
| turbo-site-git-sokra-node-process-stability.vercel.shgit | Not in the scope | 2026-11-14 |
| turbo-site-git-stricterengines.vercel.shgit | Not in the scope | 2026-11-14 |
| turborepo-examples-designsystem-docs.vercel.sh | Not in the scope | 2026-11-14 |
| turborepo-examples-gatsby-web.vercel.sh | Not in the scope | 2026-11-14 |
| turborepo-examples-svelte-web.vercel.sh | Not in the scope | 2026-11-14 |
| v0-frame.vercel.sh | Not in the scope | 2026-11-14 |
| v0-frame-git-main.vercel.shgit | Not in the scope | 2026-11-14 |
| v0-frame-render-engine-4vo9x0236.vercel.sh | Not in the scope | 2026-11-14 |
| v0-frame-render-engine-ayk1sm54x.vercel.sh | Not in the scope | 2026-11-14 |
| v0-frame-render-engine-git-iansbrash-promo-page.vercel.shgit | Not in the scope | 2026-11-14 |
| v0-frame-render-engine-git-ido-01-16-xwol1.vercel.shgit | Not in the scope | 2026-11-14 |
| v0-frame-render-engine-git-ma-fix-integration-layout.vercel.shgit | Not in the scope | 2026-11-14 |
| v0-frame-render-engine-git-max-01-15-update.vercel.shgit | Not in the scope | 2026-11-14 |
| v0-frame-render-engine-git-tz-chatzipupload0115.vercel.shgit | Not in the scope | 2026-11-14 |
| v0-vercel-webhook-automation-fp90rr464.vercel.sh | Not in the scope | 2026-11-14 |
| v0chat.vercel.sh | Not in the scope | 2026-11-14 |
| slack.vault.vercel.shtools | Not in the scope | 2026-11-14 |
| vercel-academy-lhaqud9fg.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-admin.vercel.shadmin | Not in the scope | 2026-11-14 |
| vercel-admin-git-add-remove-ns1-domain.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| wildcard.vercel-admin-git-add-remove-ns1-domain.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| vercel-admin-git-add-yc-discount.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| wildcard.vercel-admin-git-add-yc-discount.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| vercel-admin-git-option-block-reason-field.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| wildcard.vercel-admin-git-option-block-reason-field.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| vercel-admin-git-remove-cosmos.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| wildcard.vercel-admin-git-remove-cosmos.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| vercel-admin-git-sidebar-nav.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| wildcard.vercel-admin-git-sidebar-nav.vercel.shadmin, git | Not in the scope | 2026-11-14 |
| wildcard.vercel-admin.vercel.shadmin | Not in the scope | 2026-11-14 |
| vercel-agent-bvszyn2w5.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-agent-code-review-2l2w1466s.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-agent-code-review-f2jv6t9a5.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-alerts-n4q8h9gnw.vercel.sh | Not in the scope | 2026-11-14 |
| jeffrey.vercel-ci.vercel.shci | Not in the scope | 2026-11-14 |
| vercel-community-proxy-lrzt5osdu.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-compass-dashboard.vercel.shadmin | Not in the scope | 2026-11-14 |
| vercel-compass-docs.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-compass-turbo-proxy.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-dash-3cr0qiedg.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-dash-hw9r7f35s.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-dash-keh9xf79l.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-dashboard-7epa04yyk.vercel.shadmin | Not in the scope | 2026-11-14 |
| vercel-dashboard-nc6g2xtna.vercel.shadmin | Not in the scope | 2026-11-14 |
| vercel-dashboard-q42jpk16z.vercel.shadmin | Not in the scope | 2026-11-14 |
| vercel-docs-proxy-5ovwbe3iw.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-docs-proxy-5xb0awnoq.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-git-astro.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-git-endangeredmassa-refactor-create-deploy-type.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-live-git-add-code-linting.vercel.shgit | Not in the scope | 2026-11-14 |
| wildcard.vercel-live-git-add-code-linting.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-live-git-front-test.vercel.shgit, test | Not in the scope | 2026-11-14 |
| wildcard.vercel-live-git-front-test.vercel.shgit, test | Not in the scope | 2026-11-14 |
| vercel-live-git-hobby-limits.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-marketing-gkaxe8vec.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-marketing-n6pm8fju2.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-marketing-obv54w0jf.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-og-service.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-private-registry.vercel.shinternal, tools | Not in the scope | 2026-11-14 |
| vercel-recipes-2k8zuk9hx.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-recipes-8acz6mgpx.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-ship.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-ship-contacts-50uz0dav5.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-ship-contacts-93tyej5jn.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-ship-f9ny6po6t.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-site.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-site-1ddnejsfa.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-site-33i0im1gu.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-site-git-concurrent-builds-jwt.vercel.shci, git | Not in the scope | 2026-11-14 |
| vercel-site-git-docs-edge-func-fix-typo.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-docs-nits-1.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-drcmda-ship-controls.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-ecklf-auto-hide-banner.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-elliott-check-me-out-immediately.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-endangeredmassa-metadata-on-ready.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-logs-add-cache-status.vercel.shgit, monitoring | Not in the scope | 2026-11-14 |
| vercel-site-git-main.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-nextjs-conf-2023-integration-branch.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-padmaia-testing-admin-check.vercel.shadmin, git, test | Not in the scope | 2026-11-14 |
| vercel-site-git-revert-21221-static-redirects.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-rf-nav.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-sensitive-env-vars.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-ship-prefers-reduced-motion.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-git-timeyoutakeit-universal-promote.vercel.shgit | Not in the scope | 2026-11-14 |
| vercel-site-gow03hmpw.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-site-ivfjv5dp5.vercel.sh | Not in the scope | 2026-11-14 |
| vercel-site-r50pzdsjo.vercel.sh | Not in the scope | 2026-11-14 |
| vm-frame-chat-internal.vercel.shinternal | Not in the scope | 2026-11-14 |
| webjourney.vercel.sh | Not in the scope | 2026-11-14 |
| webjourney-frame.vercel.sh | Not in the scope | 2026-11-14 |
| webjourney-frame-git-main.vercel.shgit | Not in the scope | 2026-11-14 |
| webjourney-git-main.vercel.shgit | Not in the scope | 2026-11-14 |
| wildcard.vercel.sh | Not in the scope | 2026-11-14 |
| alias.zeit-cdn.net | Not in the scope | 2026-11-14 |
| 1.0.zeit.sh | Not in the scope | 2026-11-14 |
| wildcard.1.0.zeit.sh | Not in the scope | 2026-11-14 |
| 0.11.zeit.sh | Not in the scope | 2026-11-14 |
| wildcard.0.11.zeit.sh | Not in the scope | 2026-11-14 |
378 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.