Packages / ai / Security

LowVulnerabilityGHSA-rwvc-j5jr-mgvhCVE-2025-48985Published 7 Nov 2025

Vercel’s AI SDK's filetype whitelists can be bypassed when uploading files

Affected releases · ai

  • 5.x5.0.0 – 5.0.51Fixed in 5.0.52
  • 4.x and older0.0.1 – 4.3.19No fix, no longer updated

On 5.x, the newest line:

npm install ai@5.0.52
7.x

  1. Not affected

    7.0.0 – 7.0.148

    140 releases, latest

5.x

  1. Affected

    5.0.0 – 5.0.51

    52 releases

  2. Fixed

    5.0.52 – 5.0.279

    223 releases

4.x

  1. Affected

    4.0.0 – 4.3.19

    141 releases

3.x

  1. Affected

    3.0.0 – 3.4.33

    198 releases

2.x

  1. Affected

    2.0.0 – 2.2.37

    71 releases

1.x

  1. Affected

    1.0.0 – 1.1.0

    2 releases

0.x

  1. Affected

    0.0.1 – 0.0.4

    4 releases

1136 stable releases of ai, oldest to newest, one row per major.

Is your project affected?

Paste your package.json, or type the range you declare for ai. It is read in your browser and sent nowhere.

What happens

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.