Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-17 | 1 | General1 |
| 2026-05-18 | 1 | Disclosure1 |
CVE-2026-8769 A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file pack… https://www.cve.org/CVERecord?id=CVE-2026-8769
Post summary
A vulnerability (CVE-2026-8769) was identified in Vercel AI up to version 3.0.97 affecting specific JSON response handler functions, with no details on exploitation or remediation provided.
CVE-2026-8769 Resource Consumption Vulnerability in Vercel AI Up to 3.0.97 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8769
Post summary
The text only lists CVE‑2026‑8769 as a resource consumption vulnerability affecting Vercel AI up to version 3.0.97, with no additional exploit, PoC, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | vercel | ai | - | - | - |