Security
فارسی
All products

github.com/imgproxy/imgproxy

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size fieldCVE-2026-123616 · GHSA-MMQ5-XM89-9PFGVersion ranges need review. github.com/imgproxy/imgproxy/v2github.com/imgproxy/imgproxy/v3 Go High Fix reported
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code executionCVE-2026-123614 · GHSA-HFF9-5PQW-6W9FVersion ranges need review. github.com/imgproxy/imgproxy/v2github.com/imgproxy/imgproxy/v3 Go Critical Fix reported
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crashCVE-2026-123615 · GHSA-494M-4556-WF5PVersion ranges need review. github.com/imgproxy/imgproxy/v2github.com/imgproxy/imgproxy/v3 Go High Fix reported
imgproxy is vulnerable to SSRF against 0.0.0.0CVE-2025-24354 · GHSA-J2HP-6M75-V4J4Version ranges need review. github.com/imgproxy/imgproxy/v2github.com/imgproxy/imgproxy/v3 Go Medium Fix reported
imgproxy is vulnerable to Server-Side Request ForgeryCVE-2023-30019 · GHSA-9X7H-GGC3-XG47Version ranges need review. github.com/imgproxy/imgproxy/v2github.com/imgproxy/imgproxy/v3 Go Medium Fix reported
imgproxy Cross-site Scripting vulnerabilityCVE-2023-1496 · GHSA-CH9G-X9J7-RCGPVersion ranges need review. github.com/imgproxy/imgproxy/v2github.com/imgproxy/imgproxy/v3 Go Medium Fix reported