Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-29353
9.8
CRITICALCVSS v3
Published
May 16, 2022
CVSS v2
7.5 HIGH
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename.
graphql-upload
NPMMiddleware and a scalar Upload to add support for GraphQL multipart requests (file uploads via queries and mutations) to various Node.js GraphQL servers.
NPMMiddleware and a scalar Upload to add support for GraphQL multipart requests (file uploads via queries and mutations) to various Node.js GraphQL servers.= 13.0.0NVD
GitHub