Skip to content
OpenAdvisories

Product · vercel

ai

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-8769

    vercel ai provider-utils response-handler.ts createJsonErrorResponseHandler resource consumption

    A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulat…

    vercel ai langfuse-3-worker @ai-sdk/provider-utils Wolfi npm
  • Medium 5.0
    CVE-2026-8767

    vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection

    A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be ini…

    vercel ai