Ai vulnerabilities

2 known vulnerabilities in Ai from Vercel. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  ai: Server-Side Request Forgery

  CVE-2026-8768May 17, 2026Vercel

  A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The

• 7.5 High severity

  ai: Improper Neutralization of Special Elements used in a Command

  CVE-2026-8767May 17, 2026VercelEPSS 6.97%

  A vulnerability has been found in vercel ai up to 3.0.97. Impacted is the function run of the file .github/workflows/prettier-on-automerge.yml of the component PR Branch Name Interpolation. The manipulation leads to os command injection. The attack can be init