Product

Ai (<= 3.0.97)

1 brief RSS

Vercel AI Server-Side Request Forgery Vulnerability (CVE-2026-8768)

Vulnerability CVE-2026-8768 describes a server-side request forgery (SSRF) flaw in the validateDownloadUrl function of the provider-utils component in Vercel AI versions up to 3.0.97, enabling remote attackers to potentially make internal requests.

ai SSRF CVE-2026-8768 vercel

2r 1t 1c 2d ago