Findings from the $1M Vercel Sandbox challenge

Vercel published findings from its $1M Sandbox challenge, reporting 1,285 reports, $242,000 in bounties paid, and one Linux kernel zero-day vulnerability discovered by researcher Paulos Yibelo.

The kernel defect allowed leaking host memory, crashing the host, and executing code on the host.

No reports showed access to customer data.