Vercel / AI
4 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-8769 | vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption | MEDIUM | 5.3 | May 17, 2026 |
| CVE-2026-8768 | vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery | MEDIUM | 6.9 | May 17, 2026 |
| CVE-2026-8767 | vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection | LOW | 2.3 | May 17, 2026 |
| CVE-2025-48985 | A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitel… | MEDIUM | 5.3 | Nov 7, 2025 |
Showing 1 to 4 of 4 CVEs