Homepage

s3-uploader@0.4.0 vulnerabilities

Resize, rename, and upload images to AWS S3

  • latest version

    2.0.3

  • first published

    10 years ago

  • latest version published

    8 years ago

  • licenses detected

  • View s3-uploader package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the s3-uploader package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Command Injection

    s3-uploader is a Flexible and efficient image resize, rename, and upload to Amazon S3 disk storage. Uses the official AWS Node SDK, and im-resize and im-metadata for image processing.

    Affected versions of this package are vulnerable to Command Injection which insecurely passes data to the metadata() function. It is then concatenated to an OS command and executed in the context of the server.

    How to fix Command Injection?

    There is no fixed version for s3-uploader.

    *
    Go back to all versions of this package