CLSA-2026-1793271692: TuxCare security update for @ai-sdk/provider-utils (1 CVE)
Published Oct 29, 2026
·Updated
TuxCare rebuilt @ai-sdk/provider-utils to address 1 CVE. Fixed in 2.2.8-tuxcare.2.
Affected Software
1 affected componentFixes available
tuxcare/@ai-sdk/provider-utils>=2.2.8-tuxcare.0<2.2.8-tuxcare.2
2.2.8-tuxcare.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/@ai-sdk/provider-utilsto a version that resolves this vulnerability.Fixed in 2.2.8-tuxcare.2 - Upgrade
Upgrade
@ai-sdk/provider-utilsto a version that resolves this vulnerability.Fixed in 2.2.8-tuxcare.2
Event History
Oct 29, 2026
Advisory Published
via OSV·11:01 AM
Data Sourced
via OSV·11:01 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which package build contains the fix?
The issue is fixed in TuxCare's @ai-sdk/provider-utils build 2.2.8-tuxcare.2.
2
How many CVEs does this update address?
This update addresses one CVE.