The Vercel OSS Bug Bounty program is now available

The Vercel OSS bug bounty program is now publicly available on HackerOne, inviting security researchers to find vulnerabilities in Vercel's open-source projects. This program expands on a previous private initiative and covers core projects such as Next.js, Nuxt, SWR, Turborepo, and the AI SDK. The goal is to proactively identify and fix security issues, thereby reducing risk for the millions of developers and end-users who rely on these tools.