{
  "@id": "urn:uuid:0de7bfe4-8065-4f34-892b-7976a4fc1af6",
  "role": "Document Creator",
  "author": "https://tuxcare.com",
  "version": 2,
  "@context": "https://openvex.dev/ns/v0.2.0",
  "timestamp": "2026-11-03T21:08:00.067495+00:00",
  "statements": [
    {
      "status": "not_affected",
      "products": [
        {
          "@id": "pkg:npm/%40ai-sdk/provider-utils@4.0.49",
          "identifiers": {
            "purl": "pkg:npm/%40ai-sdk/provider-utils@4.0.49"
          }
        }
      ],
      "timestamp": "2026-11-03T21:08:00.067495+00:00",
      "status_notes": "Vulnerability CVE-2026-8769 does not affect version 4.0.49 of @ai-sdk/provider-utils. not_affected \u2014 The target repository (@ai-sdk/provider-utils v4.0.49) is NOT AFFECTED by CVE-2026-8769. The vulnerability described (uncontrolled resource consumption via unbounded response body reads) has been mitigated by an upstream fix that was already present in the shipped version. All three vulnerable functions (createJsonResponseHandler, createJsonErrorResponseHandler, createStatusCodeErrorResponseHan...",
      "justification": "vulnerable_code_not_present",
      "vulnerability": {
        "name": "CVE-2026-8769"
      },
      "impact_statement": "not_affected \u2014 The target repository (@ai-sdk/provider-utils v4.0.49) is NOT AFFECTED by CVE-2026-8769. The vulnerability described (uncontrolled resource consumption via unbounded response body reads) has been mitigated by an upstream fix that was already present in the shipped version. All three vulnerable functions (createJsonResponseHandler, createJsonErrorResponseHandler, createStatusCodeErrorResponseHan..."
    }
  ]
}