Log in Start free

carrierwaveuploader

Products

ProductCVEsExploitedLatest
carrierwave5–Jun 16, 2026

Exploited and recent CVEs

  • CVE-2026-44587 Medium 4.7 CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters 0.2%
  • CVE-2024-29034 Medium 6.8 CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained 0.4%
  • CVE-2023-49090 Medium 6.8 CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS 0.6%
  • CVE-2021-21305 High 7.4 Code Injection vulnerability in CarrierWave 13.2%
  • CVE-2021-21288 Medium 4.3 Server-side request forgery in CarrierWave 1.2%