carrierwaveuploader carrierwave

• CVE-2026-44587 Medium 4.7 CarrierWave has a denylisted_content_type bypass via Unescaped Regex Metacharacters 0.2%
• CVE-2024-29034 Medium 6.8 CarrierWave's Content-Type allowlist bypass vulnerability which possibly leads to XSS remained 0.4%
• CVE-2023-49090 Medium 6.8 CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS 0.6%
• CVE-2021-21305 High 7.4 Code Injection vulnerability in CarrierWave 13.2%
• CVE-2021-21288 Medium 4.3 Server-side request forgery in CarrierWave 1.2%