VYPR

npm package

file-upload-with-preview

pkg:npm/file-upload-with-preview

Vulnerabilities (1)

  • CVE-2021-23439Sep 5, 2021
    affected < 4.2.0fixed 4.2.0

    This affects the package file-upload-with-preview before 4.2.0. A file containing malicious JavaScript code in the name can be uploaded (a user needs to be tricked into uploading such a file).