Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/uppy@2.3.3
purl pkg:npm/uppy@2.3.3
Next non-vulnerable version 3.3.1
Latest non-vulnerable version 3.3.1
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-d1rx-mpux-wubk
Aliases:
CVE-2022-0528
GHSA-q24h-5rq3-63j9
Incorrect Authorization in @uppy/companion
3.3.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-k3vz-xnuk-byh1 uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF) CVE-2022-0086
GHSA-x8rq-rc7x-5fg5

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T18:01:04.898372+00:00 GitLab Importer Affected by VCID-d1rx-mpux-wubk https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/uppy/CVE-2022-0528.yml 38.6.0
2026-06-12T15:42:59.612613+00:00 GitLab Importer Fixing VCID-k3vz-xnuk-byh1 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/uppy/CVE-2022-0086.yml 38.6.0