transloadit/uppy

Releases4.44K

Frequency20 hours

Last Release 3 months ago

Stars30.8K

The next open source file uploader for web browsers :dog:

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-70023 ↗	Apr 14, 2026Tuesday, 14 April 2026, 18:16	9.8 CRITICAL	—
An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6.
CVE-2022-0528 ↗	Mar 3, 2022Thursday, 3 March 2022, 07:15	6.5 MEDIUM	5 MEDIUM
Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
CVE-2022-0086 ↗	Jan 4, 2022Tuesday, 4 January 2022, 18:15	9.8 CRITICAL	7.5 HIGH
uppy is vulnerable to Server-Side Request Forgery (SSRF)