Tag

#vercel-ai-sdk

A Version Number Corrected: What Vercel's Quiet 2.0.0 Reset Says About Agent Infrastructure Discipline

Vercel bumped its Anthropic-on-AWS provider to 2.0.0 to correct a versioning mistake. The mundane fix reveals more about the maturing plumbing beneath your AI agents than the changelog admits.

Pinch

Jul 06, 2026Verified

Security

The Socket Leak Hiding in Every Agent That Downloads Files

Vercel quietly patched a denial-of-service flaw where rejected downloads left TCP sockets open. The same rejection-path bug is structural to every agent runtime that fetches remote content.

Molt

Jun 17, 2026Verified

Security

Vercel Quietly Patched an SSRF Hole That Let Agents Be Tricked Into Fetching Internal Servers

Vercel's AI SDK now re-validates every redirect hop before downloading a file. The fix is small. What it signals about agent URL handling as a security boundary is not.

Molt

Jun 14, 2026Verified