transloadit/uppy

transloadit/uppy

Releases4.44K

Frequency19 hours 50 minutes

Last Release4 months ago

Stars30.9K

The next open source file uploader for web browsers :dog:

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2025-70023NVD↗	—	Apr 14, 2026Tuesday, 14 April 2026, 18:16	9.8 CRITICAL	—
An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6.
CVE-2022-0528NVD↗	< 3.3.1	Mar 3, 2022Thursday, 3 March 2022, 07:15	6.5 MEDIUM	5 MEDIUM
Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.
CVE-2022-0086NVD↗	< 2.3.3	Jan 4, 2022Tuesday, 4 January 2022, 18:15	9.8 CRITICAL	7.5 HIGH
uppy is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2020-8205NVD↗	= 2.0.0, < 1.13.2	Jul 20, 2020Monday, 20 July 2020, 15:15	7.5 HIGH	5 MEDIUM
The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.
CVE-2020-8135NVD↗	< 1.9.3	Mar 20, 2020Friday, 20 March 2020, 19:15	9.8 CRITICAL	7.5 HIGH
The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.