CVE-2022-0086
1 advisory.
npm/@uppy/companion CVE-2022-0086: high 8.2
uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)
Action: Upgrade @uppy/companion to 3.1.5 or later.
npm i @uppy/companion@3.1.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.1.5 | - |
Fixed versions
| 3.1.5 |
Sources
- osv: GHSA-x8rq-rc7x-5fg5
- https://nvd.nist.gov/vuln/detail/CVE-2022-0086
- https://github.com/transloadit/uppy/pull/3403
- https://github.com/transloadit/uppy/commit/fc137e30a2a3102eb191141f280d5de20dacdf8f
- https://github.com/transloadit/uppy
- https://github.com/transloadit/uppy/releases/tag/uppy%402.3.3
- https://huntr.dev/bounties/c1c03ef6-3f18-4976-a9ad-08c251279122
CVE-2022-0086 · published · modified · JSON