VDB
Sign up
CRITICAL9.8

GHSA-mxr5-p36v-479m

Unrestricted Upload of File with Dangerous Type in jquery-file-upload

Quick fix

GHSA-mxr5-p36v-479m — jquery-file-upload: upgrade to the fixed version with the command below.

npm install jquery-file-upload@4.0.5

Details

Arbitrary file upload in jQuery Upload File <= 4.0.2

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/jquery-file-upload
Introduced in: 0Fixed in: 4.0.5
Fixnpm install jquery-file-upload@4.0.5

References