CLSA-2026-1789472298 TuxCare security update for @ai-sdk/provider-utils (1 CVE)

TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 3.0.27-tuxcare.1...

0pflow (>=0.1.0-dev.2580522, <=0.1.0), 0xble (>=14.0.0, <=23.2.2) +12141 more potentially affected by CVE-2026-8769 via @ai-sdk/provider-utils (>=0.0.0, <=5.0.36)

@ai-sdk/provider-utils NPM version =0.0.0, =0.1.0-dev.2580522, =14.0.0, =1.1.5, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.0.2, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.64 and more Source cves: CVE-2026-8769 Source advisory: SNYK:JS-AISDKPROVIDERUTILS-16735288...

0pflow (>=0.1.0-dev.2580522, <=0.1.0), 0xble (>=14.0.0, <=23.2.2) +12141 more potentially affected by CVE-2026-8768 via @ai-sdk/provider-utils (>=0.0.0, <=5.0.36)

@ai-sdk/provider-utils NPM version =0.0.0, =0.1.0-dev.2580522, =14.0.0, =1.1.5, =0.1.0, =1.0.0, =0.1.0, =1.0.0, =0.0.2, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.64 and more Source cves: CVE-2026-8768 Source advisory: SNYK:JS-AISDKPROVIDERUTILS-16734888...

0xble (>=22.0.0, <=23.2.2), @302ai/ai-sdk (>=0.1.0, <=0.1.1) +1608 more potentially affected by CVE-2026-8769 via @ai-sdk/provider-utils (>=3.0.0, <=3.0.27)

@ai-sdk/provider-utils NPM version =3.0.0, =22.0.0, =0.1.0, =0.0.1, =0.1.4, =0.2.5, =0.1.1, =0.0.4, =0.0.1, =0.3.0, =0.0.1, =0.0.4, =0.1.5 and more Source cves: CVE-2026-8769 Source advisory: OSV:GHSA-866G-F22W-33X8...

@302ai/ai-sdk (>=0.2.0, <=0.2.17), @activepieces/piece-activecampaign (>=0.1.4, <=0.1.5) +2048 more potentially affected by CVE-2026-8769 via @ai-sdk/provider-utils (>=4.0.0, <=4.0.32)

@ai-sdk/provider-utils NPM version =4.0.0, =0.2.0, =0.1.4, =0.4.1, =0.1.1, =0.1.1, =0.0.1, =0.0.7, =0.1.1, =0.1.1, =0.0.1, =0.1.1, =0.1.1, =0.1.5 and more Source cves: CVE-2026-8769 Source advisory: OSV:GHSA-866G-F22W-33X8...

@agentproto/adapter-mastracode-inprocess (>=0.2.0, <=0.2.6), @ai-sdk-tools/artifacts (>=0.10.0, <=0.12.0) +206 more potentially affected by CVE-2026-8769 via @ai-sdk/provider-utils (5.0.0-canary.48)

@ai-sdk/provider-utils NPM version 5.0.0-canary.48 is affected by a known vulnerability. The following packages have a transitive dependency on @ai-sdk/provider-utils and may be impacted: - @agentproto/adapter-mastracode-inprocess =0.2.0, =0.10.0, =0.11.0, =0.10.0, =0.9.1, =2.0.0-beta.0,...