strapi @strapi/plugin-upload vulnerabilities

Latest strapi @strapi/plugin-upload CVEs

Newest publication first

1. CVE-2024-31217 @strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling

   Medium·CVSS 5.3

   Summary A Denial-of-Service was found in the media upload process causing the server to crash without restarting, affecting either development and production environments. Details Usually, errors in the application cause it to log the error and keep it running for other clients....

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.