§ tools · storyline
Prevents DNS rebinding attacks on Node.js downloads
AI SDK releases patch preventing DNS rebinding attacks on Node.js downloads.
Patch Changes 1659cd5: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time. 60f97f6: support overriding model call settings for individual `prepareStep` invocations 6a5bdff: Fix validated Node.js downloads when the HTTP connector requests a single DNS address.
6de2ec1: Preserve provider metadata from empty text deltas in `streamText`. Updated dependencies [1659cd5] Updated dependencies [6a5bdff] Updated dependencies [0012529] @ai-sdk/provider-utils@5.0.15 @ai-sdk/gateway@4.0.32
§ sources3 publications · timeline below
- github.comVercel AI SDK — ai v7.0.42primary
- github.comVercel AI SDK — ai v6.0.238
- github.comVercel AI SDK — ai v5.0.223
§ how this story moved
- primary — Vercel AI SDK — Releases publishes the launch post.
- Vercel AI SDK — Releases picks up coverage.
- Vercel AI SDK — Releases picks up coverage.