| Package | Affected versions | Patched versions |
|---|---|---|
| ai | ≤ 3.0.97 | |
| @ai-sdk/provider-utils | ≥ 4.0.0-beta.10, < 4.0.33≥ 5.0.0-beta.0, < 5.0.1< 3.0.28 | 4.0.335.0.13.0.28 |
Versions of @ai-sdk/provider-utils before 3.0.28, from 4.0.0 before 4.0.33, and from 5.0.0 before 5.0.1 are vulnerable to uncontrolled resource consumption. The createJsonResponseHandler, createJsonErrorResponseHandler, and createStatusCodeErrorResponseHandler functions in packages/provider-utils/src/response-handler.ts read response bodies without a shared size limit, allowing a remote attacker with low privileges to cause excessive memory consumption. The exploit has been publicly disclosed and may be utilized.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free