CVE-2025-47935
HighAdvisory
Published 19 May 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.008
- 54th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 88
- of 17,781 indexed, latest versions
- Container images
- 91
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Multer vulnerable to Denial of Service via memory leaks from unclosed streams
Carried by container images the latest versions of 88 of 17,781 indexed charts deploy, on 91 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| multernpm | 0.1.8, 1.3.0, 1.4.1, 1.4.2+5 more | 2.0.0 | 91 |
- OSV records
- GHSA-44fp-w29j-9vj5
Charts affected
88 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| n8nn8n | 0.23.0 | 1 of 1See more | 5,639 |
| redisinsightheywood8-helm-chartsVerified publisher | 0.4.5 | 1 of 1See more | 2,828 |
| redisinsight-secureredisinsight-secureVerified publisher | 1.0.2 | 1 of 1See more | 1,721 |
| servarrservarr | 1.0.2 | 1 of 10See more | 14,238 |
| misskeyalytiVerified publisher | 1.0.0 | 1 of 1See more | 5,251 |
| wikijsgeek-cookbookVerified publisher | 6.4.2 | 1 of 1See more | 5,946 |
| librechatlibrechat | 1.8.10 | 1 of 3See more | 2,654 |
| hoppscotchdeliveryheroVerified publisher | 0.3.2 | 1 of 1See more | 3,451 |
| bitwarden-crd-operatorlerentisVerified publisher | 0.18.0 | 1 of 1See more | 2,003 |
| n8none-acre-fundVerified publisher | 0.1.52 | 1 of 3See more | 7,776 |
| overseerrpree-helm-chartsVerified publisher | 1.2.0 | 1 of 1See more | 2,702 |
| browserless-chromesagikazarmarkVerified publisher | 0.0.5 | 1 of 1See more | 24,488 |
| dltbrokerassist-iot-distributed-broker | 0.2.0 | 1 of 9See more | 77,706 |
| dltloggingassist-iot-logging-auditing | 0.2.0 | 1 of 9See more | 77,687 |
| data-fairdata354-helmVerified publisher | 1.1.2 | 3 of 12See more | 38,346 |
| jellystatdjjudas21Verified publisher | 0.1.12 | 1 of 1See more | 1,722 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 11,458 |
| ghostgeek-cookbookVerified publisher | 2.2.0 | 1 of 1See more | 4,260 |
| overseerrgeek-cookbookVerified publisher | 5.4.2 | 1 of 1See more | 3,444 |
| youtubedl-materialgeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 4,410 |
| food-managermoreillonVerified publisher | 0.5.0 | 1 of 2See more | 13,738 |
| open-api-discoveryopen-api-discoveryVerified publisher | 0.1.1 | 1 of 1See more | 2,473 |
| pdf-editor-helmpdf-editor-web | 1.0.0 | 1 of 4See more | 4,206 |
| flamerlex | 0.3.0 | 1 of 1See more | 2,449 |
| jellyseerrrtomik-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 2,823 |
| wikiwenerme | 2.2.0 | 1 of 2See more | 3,833 |
| youtubedl-materialyoutubedl-materialVerified publisher | 0.0.1 | 1 of 1See more | 9,783 |
| dltkvassist-iot-data-integrity-verification | 0.2.0 | 1 of 9See more | 77,706 |
| dltflassist-iot-dlt-based-fl | 0.2.0 | 1 of 9See more | 77,706 |
| mx-apibicarus-labs | 0.1.0 | 1 of 4See more | 4,455 |
| colosseumbook-k8sinfra-v2 | 1.0.18 | 2 of 5See more | 26,996 |
| overseerrbrandan-schmitz-helm-chartsVerified publisher | 1.4.0 | 1 of 1See more | 3,071 |
| node-redcloudnativeapp | 1.2.2 | 1 of 1See more | 4,790 |
| authfcryptexlabsVerified publisher | 0.12.13 | 1 of 4See more | 3,769 |
| dumpstoredumpstore | 0.1.1 | 1 of 2See more | 4,251 |
| keyrockfiware | 0.8.7 | 1 of 1See more | 3,159 |
| flamegabe565Verified publisher | 0.6.0 | 1 of 1See more | 2,172 |
| double-takegeek-cookbookVerified publisher | 2.3.2 | 1 of 1See more | 12,222 |
| node-redgeek-cookbookVerified publisher | 10.3.2 | 1 of 1See more | 2,102 |
| ghostghostVerified publisher | 0.1.0 | 1 of 4See more | 9,019 |
| api-mapperglenndehaanVerified publisher | 1.2.0 | 1 of 1See more | 1,158 |
| contentbridgeglenndehaanVerified publisher | 1.1.0 | 1 of 1See more | 1,000 |
| Governify-Bluejaygovernify | 0.1.0 | 3 of 12See more | 22,512 |
| Governify-Falcongovernify | 0.1.0 | 4 of 10See more | 24,319 |
| librechathajowielandVerified publisher | 1.1.0 | 1 of 1See more | 2,950 |
| home-assistant-matter-hubhelm-chart-roeiVerified publisher | 3.0.2 | 1 of 1See more | 3,806 |
| streamsheetshelm-chartsVerified publisher | 0.2.3 | 4 of 8See more | 89,959 |
| hoppscotchhelm-charts-nr | 0.3.1 | 1 of 1See more | 3,451 |
| automatischhelmforgeVerified publisher | 1.3.7 | 1 of 4See more | 5,769 |
| bytestashhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 739 |
Container images carrying it
91 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| assistiot/ | e36a8922fa0c | multer | 2.0.0 | 3 |
| governify/ | 608c6940bb98 | multer | 2.0.0 | 2 |
| governify/ | d3f37f4f8168 | multer | 2.0.0 | 2 |
| governify/ | 38595913458f | multer | 2.0.0 | 2 |
| hoppscotch/ | f1da831950b7 | multer | 2.0.0 | 2 |
| redis/ | 1c5f43fddcdd | multer | 2.0.0 | 2 |
| requarks/ | 68f0d1848261 | multer | 2.0.0 | 2 |
| tzahi12345/ | 2f943d584711 | multer | 2.0.0 | 2 |
| anamskenneth/ | 9b7d2cd389b7 | multer | 2.0.0 | 1 |
| assistiot/ | c8a170683be7 | multer | 2.0.0 | 1 |
| automatischio/ | 3bace7a12d5f | multer | 2.0.0 | 1 |
| bicarus/ | dab88659ae3b | multer | 2.0.0 | 1 |
| browserless/ | c81ae5585b47 | multer | 2.0.0 | 1 |
| cryptexlabs/ | 189c07411d7c | multer | 2.0.0 | 1 |
| cyfershepard/ | c4e2dfa8bddf | multer | 2.0.0 | 1 |
| dipugodocker/ | d431c37fe1cd | multer | 2.0.0 | 1 |
| fallenbagel/ | 4538137bc5af | multer | 2.0.0 | 1 |
| fallenbagel/ | 6dcdb5ba5091 | multer | 2.0.0 | 1 |
| fiware/ | a1b6ed4ae84f | multer | 2.0.0 | 1 |
| glenndehaan/ | 6ff6310683bf | multer | 2.0.0 | 1 |
| glenndehaan/ | 99b9e4f73848 | multer | 2.0.0 | 1 |
| governify/ | 6d3d1a5b46a9 | multer | 2.0.0 | 1 |
| heywood8/ | 0bc9ab313d37 | multer | 2.0.0 | 1 |
| hhaluk/ | a6555953d941 | multer | 2.0.0 | 1 |
| hoppscotch/ | 538fe6ded4b6 | multer | 2.0.0 | 1 |
| ibmcom/ | 02d882f2836e | multer | 2.0.0 | 1 |
| jakowenko/ | b858bac9e32a | multer | 2.0.0 | 1 |
| jayfong/ | 163e5d621910 | multer | 2.0.0 | 1 |
| kubebb/ | 0fbb732379bc | multer | 2.0.0 | 1 |
| kubebb/ | fd8ecbd73213 | multer | 2.0.0 | 1 |
| library/ | 767230c0f263 | multer | 2.0.0 | 1 |
| library/ | 83f7bf209844 | multer | 2.0.0 | 1 |
| linuxserver/ | 6108ed066d4a | multer | 2.0.0 | 1 |
| lukasreining/ | 50e021c42e33 | multer | 2.0.0 | 1 |
| luligu/ | 8f97884bebc2 | multer | 2.0.0 | 1 |
| markdegroot/ | d8445f2a0de6 | multer | 2.0.0 | 1 |
| mishtinetwork/ | bb3fe67a5f7c | multer | 2.0.0 | 1 |
| misskey/ | e08b7c478093 | multer | 2.0.0 | 1 |
| moreillon/ | e8fd856e593d | multer | 2.0.0 | 1 |
| n8nio/ | 8b39ed5a2de9 | multer | 2.0.0 | 1 |
| n8nio/ | a9195bc499a3 | multer | 2.0.0 | 1 |
| n8nio/ | dd171d45102a | multer | 2.0.0 | 1 |
| neoskop/ | 7f52b5949f03 | multer | 2.0.0 | 1 |
| nocodb/ | 6779a4ddedf2 | multer | 2.0.0 | 1 |
| nodered/ | e131dcadfe92 | multer | 2.0.0 | 1 |
| nodered/ | e2632a7a35dd | multer | 2.0.0 | 1 |
| nodered/ | 070643219ea2 | multer | 2.0.0 | 1 |
| ohmyform/ | afe53f4acdb1 | multer | 2.0.0 | 1 |
| pawelmalak/ | 93e7b0abb603 | multer | 2.0.0 | 1 |
| pawelmalak/ | 9f88b17692a0 | multer | 2.0.0 | 1 |