Skip to main content
cve.nowby Sazabi
← npm
npmPackage

blueimp-file-upload

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release
10.32.0 (Sep 25, 2021): no advisory affects it
Newest unaffected release
10.32.0 (Sep 25, 2021), the latest release
Advisories
1
Weekly downloads
159.4K
Dependents
14
Releases
136 since 6.0.0 (Dec 15, 2011)
Registry
npm
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

    Affected: fixed in 9.22.1.

    Fixed in 9.22.1 (released Oct 13, 2018, 2 days after disclosure).

    The latest release, 10.32.0, is not affected.

    3.7% of blueimp-file-upload downloads last week were affected versions (7.3K).