Downloads now validate and pin resolved addresses against DNS rebinding
ai@5.0.223
2 enhancementsThis release2 enhancementsImprovements to existing featuresAI-tallied from the release notes
From the original release noteView original ↗
Patch Changes
- 7a6bdbc: Prevent validated downloads on Node.js from reaching private or internal services through DNS aliases or DNS rebinding by validating and pinning every resolved address at connection time.
- c5e11c6: Preserve provider metadata from empty text deltas in
streamText. - Updated dependencies [7a6bdbc]
- Updated dependencies [5bd6d2c]
Fetched July 29, 2026
