Approved changes feed: RSS · Atom

cpe:2.3:a:graphql-upload_project:graphql-upload:13.0.0:*:*:*:*:node.js:*:*

part: a version: 13.0.0 update: *

VendorGraphql Upload Project (e229b429-6a1d-5737-a063-4b41963b1ea9)
ProductGraphql Upload (9dec8b29-2dde-5234-9a07-46f9e1294d43)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jaydenseric/graphql-upload purl2cpe 2026-06-01 10:16:57.574114
pkg:npm/graphql-upload purl2cpe 2026-06-01 10:16:57.574117

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-29353 vulnerable 2026-06-08 05:42:47.641158 Details available
An arbitrary file upload vulnerability in the file upload module of Graphql-upload v13.0.0 allows attackers to execute arbitrary code via a crafted filename.
Published: 2022-05-16T13:28:43.000Z
Updated: 2024-08-03T06:17:55.186Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.