uploadfs vulnerabilities (npm)

2 vulnerabilities.

• uploadfs npm ApostropheCMS uploadfs Azure backend leaks account-level SAS token into every public attachment URL (sas: true) CVE-2026-113652 Fix available 5.6 MediumOctober 20, 2026
• uploadfs npm ApostropheCMS: Path traversal in uploadfs CVE-2026-113651 Fix available 3.3 LowOctober 20, 2026