Denial of Service Vulnerability in Multer Middleware by ExpressJS
CVE-2025-48997

8.7HIGH

Key Information:

Vendor: Expressjs
Status: Multer
Vendor: CVE Published:; 3 June 2025

What is CVE-2025-48997?

A vulnerability in Multer, a middleware for handling 'multipart/form-data' in node.js, permits attackers to exploit the service by sending a file upload request with an empty string field name. This action triggers an unhandled exception that can crash the application, leading to a Denial of Service. Users are advised to upgrade to version 2.0.1 or later as no known workarounds are available.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch