Vercel ai@5.0.273 Patches Tool Exposure and URL Formatting Bugs
Vercel's ai SDK version 5.0.273 addresses issues with tool output exposure and chat URL formatting, improving security and reliability for developers.
What changed?
Vercel released ai@5.0.273 with three key fixes. First, it prevents deleted tools, specifically those named after Object.prototype properties, from exposing persisted output to models. Second, it blocks unavailable tools from exposing persisted output to models. Third, it resolves a bug that caused duplicate slashes in chat reconnect URLs.
Why does it matter to an everyday developer?
These changes improve security by ensuring deleted or unavailable tools do not accidentally leak data to models. The fix for chat reconnect URLs enhances reliability in chat applications by preventing malformed URL issues that can disrupt session recovery.
What can the developer do now?
Developers using the Vercel ai SDK should upgrade to version 5.0.273 to benefit from these security and reliability improvements. No code changes are required, but updating ensures protection from the highlighted bugs.
