{"data":{"ecosystem":"npm","name":"ai","url":"https://aisecwatch.com/packages/npm/ai","latestVersion":"7.0.137","firstReleaseAt":"2014-02-21T22:09:35.189Z","repository":"https://github.com/vercel/ai","llm":{"exposure":"direct","depth":0,"integratedAt":"2014-02-21T22:09:35.189Z","integratedVersion":"0.0.1","sdks":["vercel-ai"],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"npm","name":"@ai-sdk/gateway","versionSpec":"4.0.110","scope":"runtime"},{"ecosystem":"npm","name":"@ai-sdk/provider","versionSpec":"4.0.26","scope":"runtime"},{"ecosystem":"npm","name":"@ai-sdk/provider-utils","versionSpec":"5.0.58","scope":"runtime"}],"advisories":[{"id":"16019759-8db1-4df4-92b1-24735e6ecd11","url":"https://aisecwatch.com/issues/16019759-8db1-4df4-92b1-24735e6ecd11","cveId":"CVE-2025-48985","title":"GHSA-rwvc-j5jr-mgvh: Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files","headline":null,"severity":"low","publishedAt":"2025-11-07T03:30:25.000Z","affected":["ai@< 5.0.52 (fixed: 5.0.52)","ai@>= 5.1.0-beta.0, < 5.1.0-beta.9 (fixed: 5.1.0-beta.9)"],"epssScore":0.00284}],"checkedAt":"2026-10-09T21:51:48.631Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}