ai 5.0.203 → 5.0.205

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # ai
 
+## 5.0.205
+
+### Patch Changes
+
+- Updated dependencies [5ed46cd]
+  - @ai-sdk/gateway@2.0.104
+
+## 5.0.204
+
+### Patch Changes
+
+- 9169261: fix(provider-utils): cancel response body on download rejection to prevent socket leak
+
+  When a download was rejected early — because the `Content-Length` header exceeded the size limit, the response status was not ok, or a redirect resolved to a blocked URL — the fetch response body was left unconsumed and uncancelled. With WHATWG Fetch/undici this leaves the underlying TCP socket open instead of returning it to the connection pool, allowing an attacker-controlled origin to exhaust file descriptors and cause a denial of service. The body is now cancelled on all early-rejection paths in `readResponseWithSizeLimit` and `download`, and `fetchWithValidatedRedirects` cancels each redirect hop's body before following or rejecting the next hop.
+
+- Updated dependencies [dd9349d]
+- Updated dependencies [9169261]
+  - @ai-sdk/gateway@2.0.103
+  - @ai-sdk/provider-utils@3.0.27
+
 ## 5.0.203
 
 ### Patch Changes

package/dist/index.js

@@ -778,7 +778,7 @@ function detectMediaType({
 var import_provider_utils2 = require("@ai-sdk/provider-utils");
 
 // src/version.ts
-var VERSION = true ? "5.0.203" : "0.0.0-test";
+var VERSION = true ? "5.0.205" : "0.0.0-test";
 
 // src/util/download/download.ts
 var download = async ({
@@ -800,6 +800,7 @@ var download = async ({
       abortSignal
     });
     if (!response.ok) {
+      await (0, import_provider_utils2.cancelResponseBody)(response);
       throw new import_provider_utils2.DownloadError({
         url: urlText,
         statusCode: response.status,