Skip to content
OpenAdvisories

Package · npm

cloudinary

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2025-12613

    Cloudinary Node SDK is vulnerable to Arbitrary Argument Injection through parameters that include an ampersand

    Versions of the package cloudinary before 2.7.0 are vulnerable to Arbitrary Argument Injection due to improper parsing of parameter values containing an ampersand. An attacker can inject additional, unintended parameters. This could lead to a variety of malic…

    cloudinary npm