vercel-ai-v2.0.6

mem0ai/mem0vercel-ai-v2.0.6Jun 1, 2026by whysosaket

AI Summary

A security-focused update to the Vercel AI SDK Provider that addresses multiple high-severity CVEs.

Key Highlights

  • Pinned transitive dependencies via pnpm overrides
  • Remediated CVEs for glob, minimatch, picomatch, and rollup

Full Release Notes

## Vercel AI SDK Provider (v2.4.6)

**Security:**
- **Dependencies:** Pinned transitive dependencies via pnpm overrides to remediate high-severity CVEs: `glob` → ^10.5.0 (CVE-2025-64756), `minimatch` → ^3.1.3 / ^5.1.8 / ^9.0.7 (CVE-2026-27903, CVE-2026-27904, CVE-2026-26996), `picomatch` → ^2.3.2 (CVE-2026-33671), `rollup` → ^4.59.0 (CVE-2026-27606)