VoltAgent Vercel AI - Vercel AI provider integration for VoltAgent
54%
Total Score
92
100
50
No build attestation or trusted-publisher provenance is provided, leaving the origin of the published artifact less verifiable.
The package has had no releases in over a year, despite 21 releases during its earlier history. That sharp stoppage is a meaningful maintenance and abandonment concern.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10541 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @voltagent/vercel-ai is vulnerable to Cross-site Scripting (XSS) in versions 0.0.1 - 0.1.17. | 0.0.1 - 0.1.17 | Medium |
| Dependency | Last Release | Score |
|---|---|---|
ai Version ^5.0.8 | — | — |
type-fest Version ^4.41.0 | — | — |
ts-pattern Version ^5.7.1 | — | — |
@ai-sdk/openai Version ^2.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.