uCrop vulnerabilities

1 known vulnerability in uCrop from Yalantis. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  uCrop: Server-Side Request Forgery

  CVE-2025-14516Dec 11, 2025Yalantis

  A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side request forgery. The at