CVE-2025-28055

Impact

upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://gist.github.com/LTLTLXEY/eb5e07436e0fcaca9747cd4467055f14
• https://github.com/shinnku-nikaidou/upset-gal-web/issues/132