CVE-2026-8768

creationtimestamp| type| source ---|---|--- 2026-05-18 02:45:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mm3uayr2oq2n...

org.webjars.npm:ai-sdk__vue (3.0.33) potentially affected by CVE-2026-8768 via org.webjars.npm:ai (6.0.33)

org.webjars.npm:ai MAVEN version 6.0.33 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars.npm:ai and may be impacted: - org.webjars.npm:ai-sdkvue 3.0.33 Source cves: CVE-2026-8768 Source advisory: SNYK:JAVA-ORGWEBJARSNPM-16734890...

0pflow (>=0.1.0-dev.2580522, <=0.1.0), 0xble (>=14.0.0, <=23.2.2) +10687 more potentially affected by CVE-2026-8768 via ai (>=0.0.0-b66d09a8-20260328011513, <=7.0.85)

ai NPM version =0.0.0-b66d09a8-20260328011513, =0.1.0-dev.2580522, =14.0.0, =1.1.5, =1.0.0, =0.1.0, =1.0.0, =0.2.14, =0.1.6, =0.0.0-dev-nicolas-fix-publishing-aurora-mcp-1750279939, =0.0.65, =1.1.0, =2.1.1 and more Source cves: CVE-2026-8768 Source advisory: SNYK:JS-AI-16734889...

CVE-2026-8768

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The...

CVE-2026-8768

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The...