Required action
If you run Node.js anywhere outside Vercel's managed runtimes, upgrade to 22.23.4, 24.22.1 or 26.12.1 now, regardless of WAF protections. That includes external backends, self-hosted Next.js, container images you build yourself, CI runners and local development.