CVE-2022-29354: Keystonejs Keystone

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

An arbitrary file upload vulnerability in the file upload module of Keystone v4.2.1 allows attackers to execute arbitrary code via a crafted file.

Affected products

• Keystonejs Keystone: version 4.2.1 only

Published 2022-05-16. Last modified 2026-06-17.