Carrierwaveuploader vulnerabilities

Products

• Carrierwave 5

Newest

• carrierwave project carrierwave CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters CVE-2026-44587 Fix available 4.7 MediumMay 27, 2026
• carrierwave project carrierwave CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained CVE-2024-29034 Fix available 6.8 MediumMarch 24, 2024
• carrierwave project carrierwave CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS CVE-2023-49090 Fix available 6.8 MediumNovember 29, 2023
• carrierwave project carrierwave Code Injection vulnerability in CarrierWave CVE-2021-21305 Fix available EPSS 13.2% 7.4 HighFebruary 8, 2021
• carrierwave project carrierwave Server-side request forgery in CarrierWave CVE-2021-21288 Fix available 4.3 MediumFebruary 8, 2021