apostrophe-site (>=0.5.0, <=0.5.47) potentially affected by CVE-2026-113651 via uploadfs (1.1.10)

uploadfs NPM version 1.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on uploadfs and may be impacted: - apostrophe-site =0.5.0, =0.5.47 Source cves: CVE-2026-113651 Source advisory: OSV:GHSA-GMFX-5G6X-RR72...

apostrophe-site (>=0.5.0, <=0.5.47) potentially affected by CVE-2026-113651 via uploadfs (1.1.10)

uploadfs NPM version 1.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on uploadfs and may be impacted: - apostrophe-site =0.5.0, =0.5.47 Source cves: CVE-2026-113651 Source advisory: SNYK:JS-UPLOADFS-21369582...

ApostropheCMS: Path traversal in uploadfs

Summary The uploadfs library's local storage backend does not validate or sanitize user-supplied paths. The prefixPath helper only strips double slashes // and the backend performs direct string concatenation uploadsPath + path. An attacker can inject ../ sequences to escape the intended uploads...

npm: ApostropheCMS: Path traversal in uploadfs

npm: ApostropheCMS: Path traversal in uploadfs vulnerability discovered by ? in WordPress npm uploadfs versions 1.28.0...

apostrophe-site (>=0.5.0, <=0.5.47) potentially affected by CVE-2026-113651 via uploadfs (1.1.10)

uploadfs NPM version 1.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on uploadfs and may be impacted: - apostrophe-site =0.5.0, =0.5.47 Source cves: CVE-2026-113651 Source advisory: GHSA-GMFX-5G6X-RR72...

GHSA-GMFX-5G6X-RR72 ApostropheCMS: Path traversal in uploadfs

Summary The uploadfs library's local storage backend does not validate or sanitize user-supplied paths. The prefixPath helper only strips double slashes // and the backend performs direct string concatenation uploadsPath + path. An attacker can inject ../ sequences to escape the intended uploads...

Directory Traversal

Overview uploadfs is a Store files in a web-accessible location via a simplified API. Can automatically scale and rotate images. Includes S3, Azure and local filesystem-based backends with the most convenient features of each. Affected versions of this package are vulnerable to Directory Traversa...

GHSA-HHPH-8536-GFQ5 ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

Summary When uploadfs is configured with the Azure backend and sas: true a supported configuration introduced in uploadfs 1.25.0, createContainer builds the BlobServiceClient from a URL that embeds the full SAS query string, and Azure SDK v12 derived clients inherit that query string. As a result...

ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

Summary When uploadfs is configured with the Azure backend and sas: true a supported configuration introduced in uploadfs 1.25.0, createContainer builds the BlobServiceClient from a URL that embeds the full SAS query string, and Azure SDK v12 derived clients inherit that query string. As a result...

npm: ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

npm: ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL sas: true vulnerability discovered by ? in WordPress npm uploadfs versions = 1.25.0, 1.28.0...

Insufficiently Protected Credentials

Overview uploadfs is a Store files in a web-accessible location via a simplified API. Can automatically scale and rotate images. Includes S3, Azure and local filesystem-based backends with the most convenient features of each. Affected versions of this package are vulnerable to Insufficiently...

CVE-2026-113652

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContainer builds the BlobServiceClient from a...

CVE-2026-113651

ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the local backend can contain parent-directory segments that escape the configured upload directory and affect file reads,...

CVE-2026-113652 ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContainer builds the BlobServiceClient from a...

CVE-2026-113652 ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContainer builds the BlobServiceClient from a...

CVE-2026-113652

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContainer builds the BlobServiceClient from a...

CVE-2026-113652

The ApostropheCMS content management system (Node.js) is vulnerable in versions 1.25.0 through 1.27.x . When using the uploadfs Azure backend with sas: true, the createContainer() function builds a BlobServiceClient from a URL that embeds a full account-level SAS token . Due to how Azure SDK v12 ...

CVE-2026-113652 ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true)

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContainer builds the BlobServiceClient from a...

EUVD-2026-105180

ApostropheCMS is an open-source Node.js content management system. From 1.25.0 until 1.28.0, uploadfs Azure backend leaks account-level SAS token into every public attachment URL. When uploadfs is configured with the Azure backend and sas: true, createContainer builds the BlobServiceClient from a...

EUVD-2026-105177

ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the local backend can contain parent-directory segments that escape the configured upload directory and affect file reads,...