vercel Vulnerabilities and Affected Products
Vulnerabilities associated with AI SDK.
Products
Clear product- next.js48 vulnerabilities
- ai3 vulnerabilities
- turborepo3 vulnerabilities
- ms2 vulnerabilities
- next2 vulnerabilities
- @ai-sdk/harness-codex1 vulnerability
- @ai-sdk/harness-opencode1 vulnerability
- AI SDK1 vulnerability
- flags1 vulnerability
- hyper1 vulnerability
- Nuxt Devtools1 vulnerability
- pkg1 vulnerability
- vercel1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
Vercel’s AI SDK's filetype whitelists can be bypassed when uploading filesA vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk | CVSS3.7v3.1 | EPSS0.265% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |