Medium severity4.2NVD Advisory· Published Sep 5, 2021· Updated Jun 17, 2026
CVE-2021-23439
CVE-2021-23439
Description
This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
file-upload-with-previewnpm | < 4.2.0 | 4.2.0 |
Affected products
2- cpe:2.3:a:johndatserakis:file-upload-with-preview:*:*:*:*:*:node.js:*:*Range: <4.2.0
Patches
Vulnerability mechanics
References
5- github.com/johndatserakis/file-upload-with-preview/pull/40/filesnvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-97pv-4338-r5vpghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2021-23439ghsaADVISORY
- snyk.io/vuln/SNYK-JS-FILEUPLOADWITHPREVIEW-1579492nvdThird Party AdvisoryWEB
- github.com/johndatserakis/file-upload-with-preview/blob/develop/src/file-upload-with-preview.js%23L168nvdBroken LinkWEB
News mentions
0No linked articles in our index yet.