Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-8205
7.5
HIGHCVSS v3
Severity scale
010
Description
The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.
transloadit/uppy
GitHubThe next open source file uploader for web browsers :dog:
GitHubThe next open source file uploader for web browsers :dog: = 2.0.0, < 1.13.2NVD