A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
References
| Link | Resource |
|---|---|
| https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb | Exploit Third Party Advisory |
| https://vuldb.com/submit/811406 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/364394 | Third Party Advisory VDB Entry |
| https://vuldb.com/vuln/364394/cti | Permissions Required VDB Entry |
Configurations
History
19 May 2026, 15:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://gist.github.com/YLChen-007/fb1096bc8428bed9a428f764d9d103bb - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/submit/811406 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/364394 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/vuln/364394/cti - Permissions Required, VDB Entry | |
| First Time |
Vercel ai
Vercel |
|
| CPE | cpe:2.3:a:vercel:ai:*:*:*:*:*:*:*:* |
17 May 2026, 23:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-05-17 23:17
Updated : 2026-05-19 15:27
NVD link : CVE-2026-8769
Mitre link : CVE-2026-8769
CVE.ORG link : CVE-2026-8769
JSON object : View
Products Affected
vercel
- ai