Advisories for Npm/Plupload package

This affects the package plupload A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.

This affects all versions of package pekeupload. If an attacker induces a user to upload a file whose name contains javascript code, the javascript code will be executed.