https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T14:12:07.285254+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-319156 EUVD-2026-319156 2026-10-05T14:12:07.332705+00:00 EUVD-2026-319156 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8768 fkie_cve-2026-8768 2026-10-05T14:12:07.332741+00:00

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

 https://cve.radiocsirt.org/vuln/ghsa-8rqj-9gxc-63cr GHSA-8rqj-9gxc-63cr 2026-10-05T14:12:07.332773+00:00

A vulnerability was found in vercel ai up to 3.0.97. The affected element is the function validateDownloadUrl of the file packages/provider-utils/src/download-blob.ts of the component provider-utils. The manipulation results in server-side request forgery. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.