VulertSecurity VulertSecurity

Vulnerability Database · npm · Package report

@strapi/plugin-upload: vulnerability history, versions and safety

@strapi/plugin-upload is a package in the npm ecosystem. Vulert records 1 vulnerability for it across 91 releases, first recorded in Jun 2024. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
1 vulnerabilities recorded M1
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all @strapi/plugin-upload vulnerabilities

Vulert verdict on @strapi/plugin-upload 4.25.23 i

Updated on 23 Oct 2026

Good news: 4.25.23, the version you would install today, has no known vulnerabilities. Older releases do — the table below lists all 1.

Package health score 78/100
  • Security No known security issues
  • Maintenance Maintaining
  • Popularity Little adoption
  • Community Not enough data

What to do: Stay on 4.25.23 or newer. This can change: a vulnerability disclosed tomorrow can affect 4.25.23 too — Vulert watches the package and alerts you if that happens. Monitor it with Vulert →

  • Current release 4.25.23 — unaffected i
  • Vulnerabilities on record 1 over 1 year · 0 in the last year i
  • Latest disclosure 12 Jun 2024 i
  • Highest CVSS 5.3 i
  • With no published fix 0 i
  • Depended on by 7 packages i
  • Last release 14 months ago i
  • Licence non-standard i

Version list, release dates, licence and dependants published by the npm registry, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for @strapi/plugin-upload, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
4.26.2 09 Jun 2026 none non-standard — Details →
0.0.0-experimental.edc07cd6c50ff8f7ad14690f5a814f427f6eea15 06 Feb 2026 M1 non-standard Yes Details →
4.26.1 08 Jan 2026 none non-standard — Details →
0.0.0-experimental.d2ab08126cfde998bfecc0aad44d3ea2b29293a6 08 Jan 2026 M1 non-standard Yes Details →
4.26.0 27 Oct 2025 none non-standard — Details →
0.0.0-experimental.a25e9e024ebcfad3e111df7cfdd0ce3f4cde0ae7 21 Oct 2025 M1 non-standard Yes Details →
4.25.24 01 Oct 2025 none non-standard — Details →
0.0.0-experimental.94fa63aae4460c507c7cd8b22437f14f6d7c0f48 30 Sep 2025 M1 non-standard Yes Details →
4.25.23 24 Jul 2025 none non-standard — Details →
0.0.0-experimental.3a6bfcae2c8eb92c0842b916011caee39f181463 21 Jul 2025 M1 non-standard Yes Details →
0.0.0-experimental.9f1e5546be459aa7a5cfc7986f45bf02af655818 17 Jul 2025 M1 non-standard Yes Details →
0.0.0-experimental.4cc691bebe3e33de5b9a9704b5f92284107aff41 21 Mar 2025 M1 non-standard Yes Details →
4.25.22 19 Mar 2025 none non-standard — Details →
0.0.0-experimental.e86ac7192458208dc921b643405f97aeba7cccb9 17 Mar 2025 M1 non-standard Yes Details →
4.25.21 12 Mar 2025 none non-standard — Details →
0.0.0-experimental.c95cecbc9ed31c3bd68eff1ae5fa4b64f2a5020e 10 Mar 2025 M1 non-standard Yes Details →
0.0.0-experimental.834390e82433a2574a0c9df3e97df4688c740888 10 Mar 2025 M1 non-standard Yes Details →
4.25.20 22 Jan 2025 none non-standard — Details →
0.0.0-experimental.a38c6dc3717b2e6e7da00e45bd349b69a6469aac 21 Jan 2025 M1 non-standard Yes Details →
0.0.0-experimental.3ab5babf5ce19c5a5c8030718c6569b661631960 17 Jan 2025 M1 non-standard Yes Details →
4.25.19 09 Jan 2025 none non-standard — Details →
0.0.0-experimental.e033e9b9c89837331a60b1b6a2c21a779fffc801 06 Jan 2025 M1 non-standard Yes Details →
4.25.18 12 Dec 2024 none non-standard — Details →
0.0.0-experimental.402494d20bd9a5e84dba7a79514325556d4f0331 09 Dec 2024 M1 non-standard Yes Details →
0.0.0-experimental.193a99218c110b9b1aebc444569ad1366ce183fc 09 Dec 2024 M1 non-standard Yes Details →
0.0.0-experimental.6e4965146398480201de1e5fa870efbead50da6a 27 Nov 2024 M1 non-standard Yes Details →
0.0.0-experimental.4184db001fb3249acae738f57aab40d83602c0e9 21 Nov 2024 M1 non-standard Yes Details →
4.25.17 21 Nov 2024 none non-standard — Details →
0.0.0-experimental.4e9c35436736c5d2f108f892c423eac99df006cc 18 Nov 2024 M1 non-standard Yes Details →
0.0.0-experimental.d10cfc2d4947d3dcbf166b29dc168cb4a7123772 15 Nov 2024 M1 non-standard Yes Details →
0.0.0-experimental.f28dba7c374eae9c02b95b4b77aba4c3ad41a841 15 Nov 2024 M1 non-standard Yes Details →
0.0.0-experimental.99d739783fc4b2410325163af5eb9cf0a6865d47 14 Nov 2024 M1 non-standard Yes Details →
4.25.16 13 Nov 2024 none non-standard — Details →
0.0.0-experimental.afcc9055b47e8d0b74c97622ecbcb077bd752ed9 11 Nov 2024 M1 non-standard Yes Details →
4.25.15 30 Oct 2024 none non-standard — Details →
0.0.0-experimental.c1db72686c9a673017790a59eb40b55c67a61097 28 Oct 2024 M1 non-standard Yes Details →
4.25.14 23 Oct 2024 none non-standard — Details →
0.0.0-experimental.dca319db78ab45784bcdb153490e644df56aabaf 22 Oct 2024 M1 non-standard Yes Details →
0.0.0-experimental.62ebf57bb35846666febb5ee2078fe02fe990f57 15 Oct 2024 M1 non-standard Yes Details →
4.25.13 02 Oct 2024 none non-standard — Details →
0.0.0-experimental.cf512c83e81bd5a0243ea6d6fe5f9c71796765f0 30 Sep 2024 M1 non-standard Yes Details →
4.25.12 25 Sep 2024 none non-standard — Details →
0.0.0-experimental.3e01e5cf5568821ff20d629f1cd59b1cf981902f 24 Sep 2024 M1 non-standard Yes Details →
0.0.0-next.ac2b9fdba5ef59eb22c4e387ac1c5a13dd219f29 17 Sep 2024 M1 non-standard Yes Details →
0.0.0-next.fd9757603c653ca239c45d6e28ab536d2dae0b39 13 Sep 2024 M1 non-standard Yes Details →
0.0.0-experimental.b067fc6e53021c0b865a20ad6ad63823ee6db793 12 Sep 2024 M1 non-standard Yes Details →
4.25.11 11 Sep 2024 none non-standard — Details →
0.0.0-experimental.852f43d1ddd36786b695b80b6dbef65a785954e4 10 Sep 2024 M1 non-standard Yes Details →
0.0.0-next.852f43d1ddd36786b695b80b6dbef65a785954e4 06 Sep 2024 M1 non-standard Yes Details →
0.0.0-next.d773bfffcd285e7a1e7bf331b6f1224b969dd46b 05 Sep 2024 M1 non-standard Yes Details →
4.25.10 04 Sep 2024 none non-standard — Details →
0.0.0-next.1465301e6a872356555441063fbaa2d748ce379c 04 Sep 2024 M1 non-standard Yes Details →
0.0.0-experimental.16afe21665d27a27f5c86939ba362066eabf1982 03 Sep 2024 M1 non-standard Yes Details →
0.0.0-next.16afe21665d27a27f5c86939ba362066eabf1982 03 Sep 2024 M1 non-standard Yes Details →
0.0.0-next.c6549bf210addfc92e2ffc84d41d7629cc3c3363 30 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.e9b6852d1c05518ff6e37d599321f7aa7aa0683b 29 Aug 2024 M1 non-standard Yes Details →
4.25.9 28 Aug 2024 none non-standard — Details →
0.0.0-experimental.dcd10ea61ffc127dbedf2e7ca72b7d4de4d9ebc4 27 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.171c6daa568f68cd001f5c65d22fb934cd295edf 27 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.aff9d09e4edf4d38b8a0de5abf83d79bedb28313 24 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.11c0ef3bd0937cb32dd5da01e346090d8702dd0b 23 Aug 2024 M1 non-standard Yes Details →
0.0.0-experimental.11e82a5b152de754631436e56b887e776bb91861 20 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.a237dfc081ee4788ee5abb71a735161aebec0ee5 16 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.53c32cda7bf48a35beddf1e20ef8b0467f9a3227 15 Aug 2024 M1 non-standard Yes Details →
4.25.8 14 Aug 2024 none non-standard — Details →
0.0.0-next.c81cadaa87436c4661a7ec61cdda96a5540b2b42 13 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.fe88c7878fe2948cfdc68f4867329c1032a618b2 10 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.d7fa025a4eacdc27490fb1629b0efb93e3cb58b9 09 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.7466630056657c483fb286557dda890490597807 08 Aug 2024 M1 non-standard Yes Details →
4.25.7 07 Aug 2024 none non-standard — Details →
0.0.0-experimental.82316c1e7bcf4bcdb240acd5ce108db34e1a0ac6 07 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.4a7382bc8deb0d2f1d0267ddcfe1292627ee8817 07 Aug 2024 M1 non-standard Yes Details →
0.0.0-next.46f14d7c2c8a11b20330ad28299e609671a8fff9 02 Aug 2024 M1 non-standard Yes Details →
4.25.6 31 Jul 2024 none non-standard — Details →
0.0.0-experimental.506c866896b405bfee0715be82ad4b0f8da1d26b 29 Jul 2024 M1 non-standard Yes Details →
0.0.0-next.506c866896b405bfee0715be82ad4b0f8da1d26b 26 Jul 2024 M1 non-standard Yes Details →
0.0.0-next.d54a672641d83234230d3d80d92aaf87f60f8c75 25 Jul 2024 M1 non-standard Yes Details →
4.25.5 24 Jul 2024 none non-standard — Details →
0.0.0-next.2700c7c9b96ae8d5d46f76e75706c2650b689668 23 Jul 2024 M1 non-standard Yes Details →
0.0.0-next.45bbb1fc92e40bd87fb86cd654975ee497deb9f2 20 Jul 2024 M1 non-standard Yes Details →
0.0.0-next.ae38a9dcdeddea4b4c0978686fb024413e5c54f5 18 Jul 2024 M1 non-standard Yes Details →
4.25.4 17 Jul 2024 none non-standard — Details →
0.0.0-next.6785f47fadddb80404c824be0a0732c652850b45 17 Jul 2024 M1 non-standard Yes Details →
0.0.0-experimental.0944d9fc86b4ba91b8c45e1d424e7ade3dde1be5 16 Jul 2024 M1 non-standard Yes Details →
0.0.0-experimental.1773982cafe8a6dd5c5d0551ba2cac334854d42f 15 Jul 2024 M1 non-standard Yes Details →
0.0.0-next.840962f2a5cbe899490400e880a366f32b06d532 11 Jul 2024 M1 non-standard Yes Details →
4.25.3 10 Jul 2024 none non-standard — Details →
0.0.0-next.9b0c43700e0ad92b33a4c97f1507f9f3243f2b6a 10 Jul 2024 M1 non-standard Yes Details →
0.0.0-next.2c18b0da94ecfad7e25c7a17ed408b9eccc259e9 05 Jul 2024 M1 non-standard Yes Details →
0.0.0-next.80375f19ecbd1a8f298515d011c3ddb5ed05f924 04 Jul 2024 M1 non-standard Yes Details →
4.25.2 03 Jul 2024 none non-standard — Details →
0.0.0-next.48485bcb4aa83c14d6d2cb99cbd47676d0d31b97 02 Jul 2024 M1 non-standard Yes Details →
0.0.0-experimental.d9f9f725e07a329ca272ecedef7bd85fa74dd661 28 Jun 2024 M1 non-standard Yes Details →
0.0.0-next.84f5cfd43cfdb85f000d388b196a36d874382dab 27 Jun 2024 M1 non-standard Yes Details →
0.0.0-next.af9f5eed766381838931b23118affc1c765c5d88 26 Jun 2024 M1 non-standard Yes Details →
0.0.0-experimental.227663963592868f16a97172ed3bba8ee369a725 25 Jun 2024 M1 non-standard Yes Details →
0.0.0-next.5c40a85ef0a0541375210234c3490574da1f5fb5 25 Jun 2024 M1 non-standard Yes Details →
0.0.0-next.c27880c9af0e2c29e6d6512b0d5fbaa6b506acdc 20 Jun 2024 M1 non-standard Yes Details →
4.25.1 19 Jun 2024 none non-standard — Details →
0.0.0-next.0b1222ea20f2dddd5d4222c5d57cd3a4c1f25be8 19 Jun 2024 M1 non-standard Yes Details →
0.0.0-next.b11829e6c6aacb45bc1ec2f341609d04d88080d2 18 Jun 2024 M1 — Yes Details →
0.0.0-experimental.b11829e6c6aacb45bc1ec2f341609d04d88080d2 17 Jun 2024 M1 — Yes Details →
0.0.0-next.a64ced5364618f917adb31b8684b4e3c01c58862 13 Jun 2024 M1 — Yes Details →
4.25.0 12 Jun 2024 none — — Details →
0.0.0-experimental.8cc7465152430e22c7d5b1b883b82b49ab00f9bd 12 Jun 2024 M1 — Yes Details →
0.0.0-experimental.0c96b74075bc22c050f4015bd8418ecc424d27f5 11 Jun 2024 M1 — Yes Details →
0.0.0-experimental.9f0a9bad2c5d007358eb61b9955afcd5ecf25e47 11 Jun 2024 M1 — Yes Details →
0.0.0-next.b4115cb216b8c27a4b97f78075a250e755fcabf2 11 Jun 2024 M1 — Yes Details →
0.0.0-experimental.5554458dc731019d3c10dee8c9ce5d9670f297b0 10 Jun 2024 M1 — Yes Details →
0.0.0-next.f4ff842a3cb7b83db540bee67554b704e042b042 08 Jun 2024 M1 — Yes Details →
0.0.0-experimental.50b714a6ec932da875882ad195a8ad6430f0f2c9 07 Jun 2024 M1 — Yes Details →
0.0.0-experimental.328b4c383c487cea7f1482cf1db8917f9d946065 07 Jun 2024 M1 — Yes Details →
0.0.0-next.8b561475428ed29d8c7ca70ec2e96f051220ebaf 06 Jun 2024 M1 — Yes Details →
4.24.5 05 Jun 2024 none — — Details →
0.0.0-next.7677002a2cdc3fac63263e78c2e9e55e5fed1955 04 Jun 2024 M1 — Yes Details →
0.0.0-experimental.28515f333803ef8ef5ccb671171cac96399a4412 03 Jun 2024 M1 — Yes Details →
0.0.0-next.9e68799d22ad0ab2dc9b68b23af501f735f6c469 01 Jun 2024 M1 — Yes Details →
0.0.0-experimental.983360e71fc84f5034f80a8a4aeed4cd267981de 30 May 2024 M1 — Yes Details →
0.0.0-experimental.f77206734629a2b88793a7a8abca40388843c656 30 May 2024 M1 — Yes Details →
0.0.0-next.bb2e16aa064f446907390a674fa0eb556b5b75a1 30 May 2024 M1 — Yes Details →

The newest 120 of 1,172 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2024 1

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 1 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for @strapi/plugin-upload

The 1 most severe of 1 vulnerabilities recorded for this package

Search all 1 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2024-31217: Denial-of-Service in @strapi/plugin-upload 5.3 medium 4.22.0 12 Jun 2024

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About @strapi/plugin-upload

Is @strapi/plugin-upload safe to use?

Vulert records 1 vulnerabilities for @strapi/plugin-upload in npm: 0 critical, 0 high, 1 medium and 0 low. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is @strapi/plugin-upload's Vulert package health score?

Vulert scores @strapi/plugin-upload 78/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of @strapi/plugin-upload affected?

No. 4.25.23, the version you would install today, has no vulnerabilities on record against it. Earlier releases do — the version table above lists each release with what affects it.

Which version of @strapi/plugin-upload should I use?

4.25.23 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does @strapi/plugin-upload have?

1 vulnerability is recorded for @strapi/plugin-upload in the npm ecosystem: 0 critical, 0 high, 1 medium and 0 low. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new @strapi/plugin-upload vulnerabilities disclosed?

0 vulnerabilities were recorded for @strapi/plugin-upload in the last 12 months, and the oldest entry in this database dates to 12 Jun 2024. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of @strapi/plugin-upload are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor @strapi/plugin-upload for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the @strapi/plugin-upload version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.