graphql-upload

NPM

www.npmjs.com

github.com

Releases23

Frequency4 months 1 week

Last Release4 days ago

Middleware and a scalar Upload to add support for GraphQL multipart requests (file uploads via queries and mutations) to various Node.js GraphQL servers.

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2022-29353NVD↗	= 13.0.0	May 16, 2022Monday, 16 May 2022, 14:15	9.8 CRITICAL	7.5 HIGH
An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename.