Description
The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.
Remediation
References
https://hackerone.com/reports/891270
Related Vulnerabilities
CVE-2017-16198 Vulnerability in npm package ritp
CVE-2021-23328 Vulnerability in npm package iniparserjs
CVE-2021-21388 Vulnerability in npm package systeminformation
CVE-2023-25330 Vulnerability in maven package com.baomidou:mybatis-plus-extension
CVE-2022-21126 Vulnerability in maven package com.github.samtools:htsjdk