Advisories · Technology

vercel ai.

Every CVE that names vercel ai among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8768 CVE record

CVSS 6.9 Medium

vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery
- vercel ai
- Server-side request forgery (SSRF)
Not analysed yet 17 May 2026
CVE-2026-8767 CVE record

CVSS 2.3 Low

vercel ai PR Branch Name Interpolation prettier-on-automerge.yml run os command injection
- vercel ai
- Command injection
Not analysed yet 17 May 2026