ai 4.0.13
1 security vulnerability
found in version
4.0.13
Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files
low severity CVE-2025-48985
low severity
CVE-2025-48985
Affected versions:
< 5.0.52
A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.
No license issues detected.
This package version has a license in the source code.
This package version is available.
This package version has not been yanked and is still available for usage.