Skip to content
OpenAdvisories

Product · apostrophecms

uploadfs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.3
    CVE-2026-113651

    ApostropheCMS: Path traversal in uploadfs

    ApostropheCMS is an open-source Node.js content management system, and uploadfs is its file storage library. Prior to uploadfs 1.28.0, attacker-controlled paths that reach the local backend can contain parent-directory segments that escape the configured uplo…

    apostrophecms apostrophe uploadfs uploadfs npm