SecurityVercel5 months ago
Vercel blocks vulnerable next-mdx-remote deployments
1 min read
Vercel now automatically blocks new deployments using next-mdx-remote versions vulnerable to CVE-2026-0969. The protection can be disabled by setting the DANGEROUSLY_DEPLOY_VULNERABLE_CVE_2026_0969=1 environment variable. Upgrading to a patched version is recommended regardless of hosting provider.
Level
Hype check
Tap to vote and see what everyone thinks.
