Homepage

Uncaught Exception Affecting anythingllm-oci-entrypoint package, versions *

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Threat Intelligence

EPSS
0.37% (29th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-MINIMOSLATEST-ANYTHINGLLMOCIENTRYPOINT-16339095
  • published2 May 2026
  • disclosed3 Jun 2025
Report a new vulnerability Found a mistake?

Introduced: 3 Jun 2025

CVE-2025-48997  (opens in a new tab)
CWE-248  (opens in a new tab)

How to fix?

There is no fixed version for Minimos:latest anythingllm-oci-entrypoint.

NVD Description

Note: Versions mentioned in the description apply only to the upstream anythingllm-oci-entrypoint package and not the anythingllm-oci-entrypoint package as distributed by Minimos. See How to fix? for Minimos:latest relevant fixed versions and status.

Multer is a node.js middleware for handling multipart/form-data. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.1 allows an attacker to trigger a Denial of Service (DoS) by sending an upload file request with an empty string field name. This request causes an unhandled exception, leading to a crash of the process. Users should upgrade to 2.0.1 to receive a patch. No known workarounds are available.