Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2025-70023

An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Transloadit
Products
Uppy
CVE-2022-0528

Server-Side Request Forgery (SSRF) in transloadit/uppy

Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Transloadit
Products
Uppy
CVE-2022-0086

Server-Side Request Forgery (SSRF) in transloadit/uppy

uppy is vulnerable to Server-Side Request Forgery (SSRF)

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Transloadit
Products
Uppy
CVE-2021-44150

The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Transloadit
Products
Tusdotnet
CVE-2020-8205

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Transloadit
Products
Uppy