carrierwaveuploader vulnerabilities
5 published CVEs name carrierwaveuploader among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-44587
CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters
carrierwaveuploader · carrierwave
Medium4.7 - CVE-2024-29034
CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained
carrierwaveuploader · carrierwave
Medium6.8 - CVE-2023-49090
CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS
carrierwaveuploader · carrierwave
Medium6.8 - CVE-2021-21305
Code Injection vulnerability in CarrierWave
carrierwaveuploader · carrierwave
High7.4 - CVE-2021-21288
Server-side request forgery in CarrierWave
carrierwaveuploader · carrierwave
Medium4.3