CVE-2025-48985 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whiteli…
Low CVSS: 3.7

CVE-2025-48985

A vulnerability in Vercel’s AI SDK has been fixed in versions 5.0.52, 5.1.0-beta.9, and 6.0.0-beta. This issue may have allowed users to bypass filetype whitelists when uploading files. All users are encouraged to upgrade.

More details: https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk
Vendor
Vercel
Product
Ai
CWE
CWE-20
Yayın Tarihi
2025-11-07 01:15:36
Güncelleme
2026-02-04 21:11:11
Source Identifier
support@hackerone.com
KEV Date Added
-

Kategoriler

CWE-20 Ai LOW Vercel 2025

Referanslar

https://github.com/vercel/ai/commit/930399bb9839a8baf3d349614106d78268775eed https://vercel.com/changelog/cve-2025-48985-input-validation-bypass-on-ai-sdk