H1 HackerOne LIVE
Vercel Open Source
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://vercel.com/
- managed triage
- yes
- response efficiency
- 90%
- first response
- 3h avg
- time to bounty
- 397h avg
19 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
Tier 1 OSS | other | yes | critical | 2026-09-20 |
Tier 2 OSS | other | yes | critical | 2026-09-20 |
Tier 3 OSS | other | yes | critical | 2026-09-20 |
https://github.com/nitrojs/nitro | source code | yes | critical | 2026-09-20 |
https://github.com/nuxt/nuxt | source code | yes | critical | 2026-09-20 |
https://github.com/sveltejs/svelte | source code | yes | critical | 2026-09-20 |
https://github.com/vercel-labs/agent-skills | source code | yes | critical | 2026-09-20 |
https://github.com/vercel-labs/skills | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/ai | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/async-sema | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/chat | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/eve | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/flags | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/ms | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/next.js | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/swr | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/turborepo | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/vercel | source code | yes | critical | 2026-09-20 |
https://github.com/vercel/workflow | source code | yes | critical | 2026-09-20 |
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.