Skip to content
OpenAdvisories

Product · vercel

ai

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2026-8768

    vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery

    A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. Th…

    vercel ai