@webiny/api-file-manager-s3 is vulnerable to Improper Input Validation
50
Medium Risk
Affected versions of this package are vulnerable to improper input validation, exposing the system to potential threats via uploaded files. To mitigate this, threat detection is introduced for all files uploaded to the File Manager. Uploaded files remain disabled until the threat scan completes; if malicious content is detected, the file is deleted, otherwise it is enabled for user access.
You are affected if you are using a version that falls within the vulnerable range.
@webiny/api-file-manager-s3 is vulnerable to Improper Input Validation in versions 5.0.0 - 5.42.0.
Upgrade the @webiny/api-file-manager-s3 library to the patch version.
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant