ucrop vulnerabilities
CVEs whose affected-version data names the ucrop package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-14516Medium· 6.3A vulnerability was found in Yalantis uCrop 2.2.11
A vulnerability was found in Yalantis uCrop 2.2.11. Affected by this issue is the function downloadFile of the file com.yalantis.ucrop.task.BitmapLoadTask.java of the component URL Handler. Performing manipulation results in server-side …
▾ Sunlityalantis · ucropEPSS 0.46%via NVD
CVE-2025-14517Medium· 5.3A vulnerability was determined in Yalantis uCrop 2.2.11
A vulnerability was determined in Yalantis uCrop 2.2.11. This affects the function UCropActivity of the file AndroidManifest.xml. Executing manipulation can lead to improper export of android application components. The attack can only …
▾ Sunlityalantis · ucropEPSS 0.24%via NVD