Description
uppy is vulnerable to Server-Side Request Forgery (SSRF)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| transloadit | transloadit/uppy | unspecified – < 2.3.3 | 2.3.3 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | @uppy/companion | < 3.1.5 | 3.1.5 | GHSA-x8rq-rc7x-5fg5 |