Vulnerability Database · npm · Package report
@ai-sdk/react: vulnerability history, versions and safety
@ai-sdk/react is a package in the npm ecosystem. Vulert holds no vulnerabilities for it yet.
Nothing recorded for this package in the npm ecosystem.
Every vulnerability has a patched version to move to.
No published version shipped hostile code.
Vulert verdict on @ai-sdk/react 4.0.154 i
Updated on 23 Oct 2026
Good news: 4.0.154, the version you would install today, has no known vulnerabilities.
- Security No known security issues
- Maintenance Sustainable
- Popularity Key ecosystem project
- Community Active
What to do: Stay on 4.0.154 or newer. This can change: a vulnerability disclosed tomorrow can affect 4.0.154 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →
- Current release 4.0.154 — unaffected i
- Vulnerabilities on record 0 i
- Highest CVSS n/a i
- With no published fix 0 i
- Stars 27,364 i
- Last release this month i
- Licence Apache-2.0 i
Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Versions
Which versions are affected
Every version Vulert tracks for @ai-sdk/react, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.
- 4.0.154 22 Oct 2026
- 3.0.317 22 Oct 2026
- 3.0.316 22 Oct 2026
- 2.0.283 22 Oct 2026
- 4.0.153 22 Oct 2026
- 2.0.282 21 Oct 2026
- 4.0.152 21 Oct 2026
- 3.0.315 21 Oct 2026
- 4.0.151 20 Oct 2026
- 4.0.150 20 Oct 2026
- 3.0.314 19 Oct 2026
- 4.0.149 19 Oct 2026
- 4.0.148 19 Oct 2026
- 2.0.281 19 Oct 2026
- 3.0.313 19 Oct 2026
- 4.0.147 16 Oct 2026
- 3.0.312 16 Oct 2026
- 3.0.311 15 Oct 2026
- 4.0.146 15 Oct 2026
- 4.0.145 15 Oct 2026
- 3.0.310 15 Oct 2026
- 2.0.280 15 Oct 2026
- 4.0.144 15 Oct 2026
- 4.0.143 14 Oct 2026
- 2.0.279 14 Oct 2026
- 3.0.309 14 Oct 2026
- 4.0.142 13 Oct 2026
- 2.0.278 13 Oct 2026
- 3.0.308 13 Oct 2026
- 4.0.141 12 Oct 2026
- 2.0.277 12 Oct 2026
- 3.0.307 12 Oct 2026
- 3.0.306 09 Oct 2026
- 4.0.140 09 Oct 2026
- 4.0.139 09 Oct 2026
- 4.0.138 08 Oct 2026
- 4.0.137 08 Oct 2026
- 4.0.136 08 Oct 2026
- 4.0.135 07 Oct 2026
- 4.0.134 07 Oct 2026
- 3.0.305 07 Oct 2026
- 2.0.276 07 Oct 2026
- 4.0.133 07 Oct 2026
- 4.0.132 06 Oct 2026
- 3.0.304 05 Oct 2026
- 2.0.275 05 Oct 2026
- 4.0.131 05 Oct 2026
- 4.0.130 01 Oct 2026
- 3.0.303 01 Oct 2026
- 4.0.129 30 Sep 2026
- 3.0.302 30 Sep 2026
- 4.0.127 30 Sep 2026
- 3.0.301 30 Sep 2026
- 2.0.274 30 Sep 2026
- 4.0.126 30 Sep 2026
- 2.0.273 30 Sep 2026
- 3.0.300 30 Sep 2026
- 4.0.125 28 Sep 2026
- 2.0.272 28 Sep 2026
- 3.0.299 28 Sep 2026
- 3.0.298 28 Sep 2026
- 4.0.123 28 Sep 2026
- 2.0.271 28 Sep 2026
- 4.0.122 28 Sep 2026
- 3.0.297 28 Sep 2026
- 4.0.121 27 Sep 2026
- 4.0.120 27 Sep 2026
- 3.0.296 27 Sep 2026
- 4.0.119 25 Sep 2026
- 3.0.295 25 Sep 2026
- 2.0.270 25 Sep 2026
- 4.0.117 24 Sep 2026
- 3.0.294 24 Sep 2026
- 2.0.269 24 Sep 2026
- 3.0.293 23 Sep 2026
- 2.0.268 23 Sep 2026
- 4.0.116 23 Sep 2026
- 3.0.292 23 Sep 2026
- 4.0.115 23 Sep 2026
- 2.0.267 23 Sep 2026
- 4.0.114 22 Sep 2026
- 4.0.113 22 Sep 2026
- 2.0.266 22 Sep 2026
- 3.0.291 22 Sep 2026
- 4.0.112 22 Sep 2026
- 2.0.265 21 Sep 2026
- 3.0.290 21 Sep 2026
- 4.0.111 21 Sep 2026
- 4.0.110 18 Sep 2026
- 2.0.264 18 Sep 2026
- 4.0.109 18 Sep 2026
- 2.0.263 18 Sep 2026
- 3.0.289 18 Sep 2026
- 3.0.288 16 Sep 2026
- 4.0.108 16 Sep 2026
- 4.0.107 16 Sep 2026
- 2.0.262 16 Sep 2026
- 3.0.287 16 Sep 2026
- 4.0.106 16 Sep 2026
- 4.0.105 15 Sep 2026
- 4.0.104 15 Sep 2026
- 4.0.103 14 Sep 2026
- 2.0.261 14 Sep 2026
- 3.0.286 14 Sep 2026
- 2.0.260 12 Sep 2026
- 3.0.285 12 Sep 2026
- 4.0.102 12 Sep 2026
- 3.0.284 11 Sep 2026
- 4.0.101 11 Sep 2026
- 2.0.259 11 Sep 2026
- 4.0.100 09 Sep 2026
- 4.0.99 09 Sep 2026
- 2.0.258 09 Sep 2026
- 3.0.283 09 Sep 2026
- 4.0.98 09 Sep 2026
- 3.0.282 09 Sep 2026
- 2.0.257 09 Sep 2026
- 3.0.281 08 Sep 2026
- 4.0.97 08 Sep 2026
- 4.0.96 04 Sep 2026
| Version | Released | Vulert vulnerabilities | Licence | Fix published | Details |
|---|---|---|---|---|---|
| 4.0.154 | 22 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.317 | 22 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.316 | 22 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.283 | 22 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.153 | 22 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.282 | 21 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.152 | 21 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.315 | 21 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.151 | 20 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.150 | 20 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.314 | 19 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.149 | 19 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.148 | 19 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.281 | 19 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.313 | 19 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.147 | 16 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.312 | 16 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.311 | 15 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.146 | 15 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.145 | 15 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.310 | 15 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.280 | 15 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.144 | 15 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.143 | 14 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.279 | 14 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.309 | 14 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.142 | 13 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.278 | 13 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.308 | 13 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.141 | 12 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.277 | 12 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.307 | 12 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.306 | 09 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.140 | 09 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.139 | 09 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.138 | 08 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.137 | 08 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.136 | 08 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.135 | 07 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.134 | 07 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.305 | 07 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.276 | 07 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.133 | 07 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.132 | 06 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.304 | 05 Oct 2026 | none | Apache-2.0 | — | Details → |
| 2.0.275 | 05 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.131 | 05 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.130 | 01 Oct 2026 | none | Apache-2.0 | — | Details → |
| 3.0.303 | 01 Oct 2026 | none | Apache-2.0 | — | Details → |
| 4.0.129 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.302 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.127 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.301 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.274 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.126 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.273 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.300 | 30 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.125 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.272 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.299 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.298 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.123 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.271 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.122 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.297 | 28 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.121 | 27 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.120 | 27 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.296 | 27 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.119 | 25 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.295 | 25 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.270 | 25 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.117 | 24 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.294 | 24 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.269 | 24 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.293 | 23 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.268 | 23 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.116 | 23 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.292 | 23 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.115 | 23 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.267 | 23 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.114 | 22 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.113 | 22 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.266 | 22 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.291 | 22 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.112 | 22 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.265 | 21 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.290 | 21 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.111 | 21 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.110 | 18 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.264 | 18 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.109 | 18 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.263 | 18 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.289 | 18 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.288 | 16 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.108 | 16 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.107 | 16 Sep 2026 | none | Apache-2.0 | — | Details → |
| 2.0.262 | 16 Sep 2026 | none | Apache-2.0 | — | Details → |
| 3.0.287 | 16 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.106 | 16 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.105 | 15 Sep 2026 | none | Apache-2.0 | — | Details → |
| 4.0.104 | 15 Sep 2026 | none | — | — | Details → |
| 4.0.103 | 14 Sep 2026 | none | — | — | Details → |
| 2.0.261 | 14 Sep 2026 | none | — | — | Details → |
| 3.0.286 | 14 Sep 2026 | none | — | — | Details → |
| 2.0.260 | 12 Sep 2026 | none | — | — | Details → |
| 3.0.285 | 12 Sep 2026 | none | — | — | Details → |
| 4.0.102 | 12 Sep 2026 | none | — | — | Details → |
| 3.0.284 | 11 Sep 2026 | none | — | — | Details → |
| 4.0.101 | 11 Sep 2026 | none | — | — | Details → |
| 2.0.259 | 11 Sep 2026 | none | — | — | Details → |
| 4.0.100 | 09 Sep 2026 | none | — | — | Details → |
| 4.0.99 | 09 Sep 2026 | none | — | — | Details → |
| 2.0.258 | 09 Sep 2026 | none | — | — | Details → |
| 3.0.283 | 09 Sep 2026 | none | — | — | Details → |
| 4.0.98 | 09 Sep 2026 | none | — | — | Details → |
| 3.0.282 | 09 Sep 2026 | none | — | — | Details → |
| 2.0.257 | 09 Sep 2026 | none | — | — | Details → |
| 3.0.281 | 08 Sep 2026 | none | — | — | Details → |
| 4.0.97 | 08 Sep 2026 | none | — | — | Details → |
| 4.0.96 | 04 Sep 2026 | none | — | — | Details → |
The newest 120 of 1,321 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.
02 Disclosure history
How often vulnerabilities are recorded
No dated vulnerabilities are recorded for this package yet.
Other ways into the data
03 Vulnerabilities
Recorded vulnerabilities for @ai-sdk/react
No vulnerabilities match this view.
Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback
Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315
Questions
About @ai-sdk/react
Is @ai-sdk/react safe to use?
Vulert has no vulnerabilities on record for @ai-sdk/react in npm at this point. That is a good signal rather than a guarantee: new vulnerabilities are published for packages all the time, so the versions you actually run are still worth monitoring.
What is @ai-sdk/react's Vulert package health score?
Vulert scores @ai-sdk/react 99/100, which reads as healthy. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).
Is the latest version of @ai-sdk/react affected?
No. 4.0.154, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.
How many vulnerabilities does @ai-sdk/react have?
0 vulnerabilities are recorded for @ai-sdk/react in the npm ecosystem: 0 critical, 0 high, 0 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.
How often are new @ai-sdk/react vulnerabilities disclosed?
0 vulnerabilities were recorded for @ai-sdk/react in the last 12 months. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.
Which versions of @ai-sdk/react are affected?
Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.
How do I monitor @ai-sdk/react for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @ai-sdk/react version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.