Uploads: mimeType able to be bypassed #14434

Open

Assignees

Labels

created-by: Payload teamprioritized

opened

on Oct 31, 2025

Describe the Bug

mimeType restrictions are able to be bypassed when the contentType on the incoming request is manipulated.

Metadata

Assignees

jessrynkar

Labels

created-by: Payload teamprioritized

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests