AIKIDO-2026-10990
@ai-sdk/provider-utils is vulnerable to Prototype Pollution
72
High Risk
This Affects:
@ai-sdk/provider-utilsTL;DR
secureJsonParse could be bypassed for prototype-pollution keys by using unicode-escaped __proto__ / constructor in JSON input. The filter didn't recognize escaped variants and skipped safety checks which JSON.parse then normalized those variants into dangerous property names. The fix updates the detection regexes to recognize unicode-escaped forms and hardens the filter to only operate on non-null object-valued constructor properties.
Who does this affect?
You are affected if you use a version of @ai-sdk/provider-utils prior to 4.0.18.
Background info
@ai-sdk/provider-utils is vulnerable to Prototype Pollution in versions 0.0.1 - 4.0.17.
How to fix this
Update the package to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant