github vercel/ai @ai-sdk/provider-utils@3.0.22

latest releases: ai@7.0.0-beta.1, @ai-sdk/vue@4.0.0-beta.1, @ai-sdk/svelte@5.0.0-beta.1...
16 hours ago

Patch Changes

  • 6a2f01b: Add URL validation to download to prevent blind SSRF attacks. Private/internal IP addresses, localhost, and non-HTTP protocols are now rejected before fetching.
  • 17d64e3: fix(provider-utils): prevent unicode escape bypass in secureJsonParse

Don't miss a new ai release

NewReleases is sending notifications on new releases.