transloadit

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

transloadit records in CISA KEV

No transloadit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Uppy 3 records MEDIUM Tusdotnet 1 record LOW

Records

4 records

TI-2022-00037 CVE-2022-0086 · GHSA-x8rq-rc7x-5fg5

Server-Side Request Forgery (SSRF) in transloadit/uppy

MEDIUM 45

uppy is vulnerable to Server-Side Request Forgery (SSRF)

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01246 Published 2022-01-04 Fixed in 2.3.3, 3.1.5 CWE-918

TI-2022-00448 CVE-2022-0528 · GHSA-q24h-5rq3-63j9

Server-Side Request Forgery (SSRF) in transloadit/uppy

LOW 35

Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00997 Published 2022-03-03 Fixed in 3.3.1 CWE-918

TI-2020-06623 CVE-2020-8205 · GHSA-9m4x-8w29-r78g

Server-side request forgery in uppy

LOW 35

The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal syste…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0119 Published 2020-07-20 Fixed in 1.13.2, 2.0.0-alpha.5 CWE-918

TI-2021-19850 CVE-2021-44150

The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.

LOW 34

The client in tusdotnet through 2.5.0 relies on SHA-1 to prevent spoofing of file content.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00535 Published 2021-11-22 No fix listed CWE-326

Open these records in search →

Critical	1
High	3
Medium	0
Low	0
No CVSS	0