AIKIDO-2026-10995

TL;DR

The downloadBlob helper in @ai-sdk/provider-utils reads response bodies via unbounded arrayBuffer() and blob() calls with no size cap. An attacker who can influence a URL passed into the helper can point at a host that streams arbitrarily large bytes and force the host process to crash. The default behavior applies no Content-Length check and no streaming limit. The fix introduces a readResponseWithSizeLimit helper that enforces a 2 GiB default cap, rejects responses whose advertised Content-Length exceeds the limit, and aborts streaming reads once received bytes pass the cap.