Skip to content
Threat Feed

Tag

CVE-2026-8768

1 brief RSS
medium advisory

Vercel AI Server-Side Request Forgery Vulnerability (CVE-2026-8768)

Vulnerability CVE-2026-8768 describes a server-side request forgery (SSRF) flaw in the validateDownloadUrl function of the provider-utils component in Vercel AI versions up to 3.0.97, enabling remote attackers to potentially make internal requests.

ai SSRF CVE-2026-8768 vercel
2r 1t 1c