CVE-2025-48985

ADVISORY - github

Summary

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.

EPSS Score⁠: 0.00077 (0.229)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-20⁠

Improper Input Validation

ADVISORY - github

CWE-20⁠

Improper Input Validation

CWE-682⁠

Incorrect Calculation

Impacted images

Advisories

NIST

CREATED

7 months ago

UPDATED

4 months ago

ADVISORY IDCVE-2025-48985⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-20⁠

CVSS SCORE

3.7low

GitHub

CREATED

7 months ago

UPDATED

6 months ago

ADVISORY IDGHSA-rwvc-j5jr-mgvh⁠

EXPLOITABILITY SCORE

2.2

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-20⁠CWE-682⁠

CVSS SCORE

3.7low

Chainguard

CREATED

5 months ago

UPDATED

5 months ago

ADVISORY ID

CGA-qrxc-26qf-c7f4

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY ID

MINI-2f7x-49qg-3j3j

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

5 months ago

UPDATED

5 months ago

ADVISORY ID

MINI-3gx6-g372-w7fr

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

3 months ago

UPDATED

3 months ago

ADVISORY ID

MINI-7hx3-hxfm-3jg5

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY ID

MINI-f35c-w682-rr9c

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

5 months ago

UPDATED

5 months ago

ADVISORY ID

MINI-j35r-rhv7-7cx6

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

7 months ago

UPDATED

7 months ago

ADVISORY ID

MINI-m3q6-gm92-wqrm

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

minimos

CREATED

5 months ago

UPDATED

5 months ago

ADVISORY ID

MINI-qr5f-fjr4-ccfj

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY