Vulnerabilities

TI-2026-07707 CVE-2026-8769 · GHSA-866g-f22w-33x8

vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

MEDIUM 57

A vulnerability was determined in vercel ai up to 3.0.97.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00561 Published 2026-05-17 Fixed in 3.0.28, 4.0.33 +1 CWE-400

TI-2026-07706 CVE-2026-8768 · GHSA-8rqj-9gxc-63cr

HIGH 70

A vulnerability was found in vercel ai up to 3.0.97.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00458 Published 2026-05-17 No fix listed CWE-918

TI-2026-07705 CVE-2026-8767 · GHSA-9pj2-3x6v-c3pp

MEDIUM 45

A vulnerability has been found in vercel ai up to 3.0.97.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.06966 Published 2026-05-17 No fix listed CWE-77

TI-2025-31113 CVE-2025-48985 · GHSA-rwvc-j5jr-mgvh

LOW 24

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00284 Published 2025-11-07 Fixed in 5.1.0-beta.9, 5.0.52 CWE-20