Who contributed to Vercel on June 12, 2026?

3 developers shipped this update, including gr2m, aayush-kapoor, and unstubbable.

What were the notable Vercel updates?

fix(provider-utils,ai): harden download SSRF guard against hostname and redirect bypasses (#15980), fix(provider-utils): cancel response body on download rejection to prevent socket leak, and fix(mcp): lock first sse endpoint received via event.

@vercel

Next.js + the Vercel platform - frontend infrastructure for the web

github ↗

Pick a date

Topics: JavaScript Full archive →

The Wire · Showcase

VERCEL AI HARDENS AGAINST SSRF AND SOCKET LEAKS, NEXT.JS CACHE LAYER GETS DEV PERSISTENCE

By RepoJournal · Filed 06:00 UTC on June 12, 2026 · About Vercel

3 people shipped this

gr2m @gr2m 1 cited

aayush-kapoor @aayush-kapoor 1 cited

unstubbable @unstubbable 1 cited

Vercel AI shipped critical fixes to block three classes of SSRF bypasses in download validation, while Next.js dev server now persists private cache entries across reloads.

The AI SDK's `downloadBlob`, `download`, and MCP client functions had multiple security gaps in their URL validation and socket handling that have been patched [1][2]. The SSRF guard now blocks hostname tricks and redirect bypasses, and rejected downloads properly cancel their response bodies to prevent TCP socket leaks that could pile up under sustained load [2]. On the MCP side, once a client receives its first valid SSE endpoint, that URL stays locked in and later endpoint events are ignored, preventing a malicious event from hijacking subsequent tool calls [3]. Meanwhile, Next.js dev server improvements make cache behavior more realistic: private `'use cache'` entries now persist in a built-in in-memory handler so warm reloads stay fast [4], and stale cache entries serve until actual expiration rather than dropping at revalidate time [5]. The Vercel CLI got two wins for integration discovery: `vercel integration discover --category <slug>` filters the marketplace, and a new `vercel integration categories` subcommand lists valid slugs [7]. Node framework preset detection now works without package.json, defaulting to ESM format for a bare `server.ts` [6].

Action items

→ Update @vercel/ai to latest patch immediately if you use downloadBlob or MCP clients with untrusted URLs vercel/ai [immediate]
→ Review your next dev cache patterns; private cache now persists by default in development vercel/next.js [plan]
→ If you're using custom OpenAPI specs, upgrade to latest vercel CLI to use --spec-url flag vercel/vercel [monitor]
→ Monitor Workflow runs for duplicate hook_created events; idempotency fix now prevents spurious conflicts vercel/workflow [monitor]

References

[1] fix(provider-utils,ai): harden download SSRF guard against hostname and redirect bypasses (#15980) vercel/ai
[2] fix(provider-utils): cancel response body on download rejection to prevent socket leak ↗ vercel/ai
[3] fix(mcp): lock first sse endpoint received via event ↗ vercel/ai
[4] Persist `'use cache: private'` entries in dev (#94694) vercel/next.js
[5] Serve stale `'use cache'` entries in the dev server until they expire ↗ vercel/next.js
[6] Support Node framework preset without a package.json (#16614) vercel/vercel
[7] [cli] Add --category filter + integration categories subcommand (#16576) vercel/vercel

Quick answers

What shipped in Vercel on June 12, 2026?: Vercel AI shipped critical fixes to block three classes of SSRF bypasses in download validation, while Next.js dev server now persists private cache entries across reloads. In total, 66 commits, 70 pull requests, and 22 releases landed.
Who contributed to Vercel on June 12, 2026?: 3 developers shipped this update, including gr2m, aayush-kapoor, and unstubbable.
What were the notable Vercel updates?: fix(provider-utils,ai): harden download SSRF guard against hostname and redirect bypasses (#15980), fix(provider-utils): cancel response body on download rejection to prevent socket leak, and fix(mcp): lock first sse endpoint received via event.

TURBOPACK RUNTIME FIXES SHIP AS NEXT.JS LOCKS DOWN APP SHELL STREAMING

Sampoder eliminated a high-severity deoptimization in Turbopack's chunk URL resolution that was bailing out on large import trees, while the team shipped per-segment prefetch offsets to squeeze more performance out of static rendering.

javascript 12 shipped 1-min read

@vercel 2 days ago

NEXT.JS PLUGS MEMORY LEAK IN EDGE RUNTIME, FIXES DEV OVERLAY ENCODING BUGS

A critical sandbox memory leak that causes step-like heap growth in self-hosted Next.js servers is patched, while dev overlay symbolication now correctly handles project paths with special characters.

javascript 31 shipped 2-min read

@vercel 3 days ago

NEXT.JS OPTIMIZES APP ROUTING ENTRY POINTS WHILE WORKFLOW CUTS STREAM LATENCY 20 PERCENT

Next.js extracted invariant app-page handlers into shared runtime modules while Workflow's stream write batching moves into core, eliminating per-token round trips on idle producers.

+11

javascript 126 shipped 2-min read

@vercel 4 days ago

TWO CRITICAL SECURITY PATCHES LAND IN WORKFLOW AND EVE OVERNIGHT

Next 16.2.11 and PostCSS 8.5.12 patches ship across workflow to seal CVE vulnerabilities, while Eve locks down workflow failure visibility.

javascript 153 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.