NIST · via Voidly Atlas
CVE-2026-8769
This is the agency's own public-domain data, curated and made citable by Voidly. Voidly adds no independent claim — always verify against the linked canonical source.
cve id
CVE-2026-8769
published
2026-05-17T23:17:03.180
last modified
2026-05-17T23:17:03.180
status
Received
description
A vulnerability was determined in vercel ai up to 3.0.97. The impacted element is the function createJsonResponseHandler/createJsonErrorResponseHandler of the file packages/provider-utils/src/response-handler.ts of the component provider-utils. This manipulation causes resource consumption. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
cvss score
4.3
cvss severity
MEDIUM
cvss vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
cwes
CWE-400|CWE-404
cpe count
0
Cite this record
CVE-2026-8769 — MEDIUM. NIST, via Voidly Atlas — Surveillance & Digital-Rights Watch. Retrieved 2026-06-07, https://voidly.ai/atlas/federal/nvd-cves/CVE-2026-8769
@misc{voidly_nvd_cves_CVE20268769,
title = {CVE-2026-8769 — MEDIUM},
author = {{Voidly}},
howpublished = {\url{https://voidly.ai/atlas/federal/nvd-cves/CVE-2026-8769}},
note = {Source: NIST National Vulnerability Database, https://nvd.nist.gov/vuln/detail/CVE-2026-8769. Public domain (17 U.S.C. §105); re-surfaced under CC BY 4.0},
urldate = {2026-06-07},
year = {2026}
}Also available as JSON/BibTeX/APA: API record. Source data is U.S. federal public domain (17 U.S.C. §105). Re-surfaced by Voidly under CC BY 4.0.