PatchTheCVE: uppyhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-0528: Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.https://patchthecve.com/cve/CVE-2022-0528.htmlhttps://patchthecve.com/cve/CVE-2022-0528.htmlWed, 17 Jun 2026 04:20:46 +0000MEDIUM 6.5: Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.CVE-2022-0086: uppy is vulnerable to Server-Side Request Forgery (SSRF)https://patchthecve.com/cve/CVE-2022-0086.htmlhttps://patchthecve.com/cve/CVE-2022-0086.htmlWed, 17 Jun 2026 04:19:57 +0000CRITICAL 9.8: uppy is vulnerable to Server-Side Request Forgery (SSRF)CVE-2020-8205: The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerhttps://patchthecve.com/cve/CVE-2020-8205.htmlhttps://patchthecve.com/cve/CVE-2020-8205.htmlWed, 17 Jun 2026 03:26:03 +0000HIGH 7.5: The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external networks or otherwise interact with internal systems.CVE-2020-8135: The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allowshttps://patchthecve.com/cve/CVE-2020-8135.htmlhttps://patchthecve.com/cve/CVE-2020-8135.htmlWed, 17 Jun 2026 03:25:55 +0000CRITICAL 9.8: The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or otherwise interact with internal systems.