Lucene search

Uppy Security Vulnerabilities

cve

CVE-2020-8205

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.

7.5CVSS

7.3AI Score

0.004EPSS

2020-07-20 03:15 PM

cve

CVE-2022-0086

uppy is vulnerable to Server-Side Request Forgery (SSRF)

9.8CVSS

9.4AI Score

0.003EPSS

2022-01-04 06:15 PM

cve

CVE-2022-0528

Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.

7.5CVSS

7.5AI Score

0.001EPSS

2022-03-03 07:15 AM