GHSA-G4MF-96X5-5M2C Cloudinary Node SDK is vulnerable to Arbitrary Argument Injection through parameters that include an ampersand

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

Cloudinary Node SDK is vulnerable to Arbitrary Argument Injection through parameters that include an ampersand

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

CVE-2025-12613

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

CVE-2025-12613

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

CVE-2025-12613

CVE-2025-12613 affects the Cloudinary Node SDK prior to 2.7.0. The vulnerability stems from improper parsing of parameter values containing an ampersand, enabling Arbitrary Argument Injection where an attacker can inject additional, unintended parameters. Potential outcomes include bypassing secu...

CVE-2025-12613

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

CVE-2025-12613

Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malicious outcomes, such as bypassing...

PT-2025-45601

Name of the Vulnerable Software and Affected Versions cloudinary versions prior to 2.7.0 Description The package is susceptible to Arbitrary Argument Injection because of improper parsing of parameter values that include an ampersand &. This allows an attacker to inject additional, unintended...

Cloudinary Node SDK 安全漏洞

Cloudinary Node SDK is a Cloudinary open source development toolkit for Cloudinary NPM. A security vulnerability exists in Cloudinary Node SDK versions prior to 2.7.0, which stems from improper parsing of parameter values containing with symbols, which could lead to an arbitrary parameter injecti...

MAL-2025-17181 Malicious code in cloudinary-url-builder (npm)

The package cloudinary-url-builder was found to contain malicious code...

Malicious code in cloudinary-url-builder (npm)

The package cloudinary-url-builder was found to contain malicious code...

Arbitrary Argument Injection

Overview cloudinary is a Cloudinary NPM for node.js integration Affected versions of this package are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a...

@accounter/server (>=0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, <=0.0.3-alpha-20241114141215-09b7d417e7e139562b2a77a6eb2d990da536e1ec), @dossierhq/test-data (1.0.1) +4 more potentially affected by CVE-2025-12613 via cloudinary (>=2.0.3, <=2.6.1)

cloudinary NPM version =2.0.3, =0.0.1-alpha-20240307145247-66232ffd2f926ee16fb5781f8c93d98fdf4d1416, =7.1.0, =1.0.0-alpha.88, =1.0.0-alpha.88, =0.0.1, =0.0.6 Source cves: CVE-2025-12613 Source advisory: SNYK:JS-CLOUDINARY-10495740...

MAL-2024-12111 Malicious code in cloudinary-ct-run-sub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8b17191416c445db03bfceae872f6642a1171a2300b65df0c546dd5a1fc19bc The OpenSSF Package Analysis project identified 'cloudinary-ct-run-sub' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in cloudinary-ct-run-sub (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b8b17191416c445db03bfceae872f6642a1171a2300b65df0c546dd5a1fc19bc The OpenSSF Package Analysis project identified 'cloudinary-ct-run-sub' @ 1.1.0 npm as malicious. It is considered malicious because: - The...

Malicious code in dragonfly_cloudinary-datastore (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in dragonfly_cloudinary (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6876 Malicious code in dragonfly_cloudinary-datastore (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

payload-cloudinary-plugin (0.0.10), payload-plugin-lexical (>=0.0.19, <=0.0.21) potentially affected by CVE-2023-30843 via payload (>=1.1.26, <=1.6.26)

payload NPM version =1.1.26, =0.0.19, =0.0.21 Source cves: CVE-2023-30843 Source advisory: OSV:GHSA-35JJ-VQCF-F2JF...

MAL-2022-1004 Malicious code in angular-cloudinary-photo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4b59796ba271976005dde455be31a416442de0369ccdf3a101759a3ccdcaea1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...