CVE-2026-8768

creationtimestamp| type| source ---|---|--- 2026-05-18 02:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3uayr2oq2n...

org.webjars.npm:ai-sdk__vue (3.0.33) potentially affected by CVE-2026-8768 via org.webjars.npm:ai (6.0.33)

org.webjars.npm:ai MAVEN version 6.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:ai and may be impacted: - org.webjars.npm:ai-sdkvue 3.0.33 Source cves: CVE-2026-8768 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16734890...

CVE-2026-8768

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The...

CVE-2026-8768

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The...