Known Vulnerabilities for Open Upload by Open Upload Project
Listed below are 1 of the newest known vulnerabilities associated with "Open Upload" by "Open Upload Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63429 json | HeyForm is an open-source form builder. Prior to version 3.0.0-rc.9, `POST /api/upload` has no authentication guard, no globa... | Not Provided | 2026-07-20 | 2026-07-20 |
| CVE-2026-62350 json | TDengine is an open source, time-series database optimized for Internet of Things devices. Prior to 3.4.1.15, a user with cre... | Not Provided | 2026-07-15 | 2026-07-18 |
| CVE-2026-61504 json | Rejetto HFS 3.0.0 through 3.2.0 does not escape file names in its fallback "basic" web listing, and this listing can be force... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-59217 json | Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, the file upload path a... | Not Provided | 2026-07-09 | 2026-07-14 |
| CVE-2026-55633 json | DataEase is an open source data visualization and analysis tool. Prior to 2.10.24, a bypass of the H2 zip protocol and file d... | Not Provided | 2026-07-07 | 2026-07-08 |
| CVE-2026-53962 json | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, insufficient SVG saniti... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-53724 json | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6... | Not Provided | 2026-06-12 | 2026-06-12 |
| CVE-2026-53648 json | FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.1, downloadable product files a... | Not Provided | 2026-07-07 | 2026-07-07 |
| CVE-2026-52891 json | Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied filename... | Not Provided | 2026-07-15 | 2026-07-17 |
| CVE-2026-52811 json | Gogs is an open source self-hosted Git service. Prior to 0.14.3, (*Repository).UploadRepoFiles checks for symlinks only on th... | Not Provided | 2026-06-24 | 2026-06-26 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Open Upload Project | Open Upload | 0.4.3 | |||
| Application | Open Upload Project | Open Upload | 0.4.2 | |||
| Application | Open Upload Project | Open Upload | 0.4.1 | |||
| Application | Open Upload Project | Open Upload | 0.4 | |||
| Application | Open Upload Project | Open Upload | 0.4 | |||
| Application | Open Upload Project | Open Upload | 0.4 | |||
| Application | Open Upload Project | Open Upload | 0.4 | |||
| Application | Open Upload Project | Open Upload | 0.3 | |||
| Application | Open Upload Project | Open Upload | - |