Vulnerability GHSA-cxvp-82cq-57h2
High Risk
HIGH RISK
CVSS Score: 8.6
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
September 21, 2023 at 05:10 PM UTC
blurhash panics on parsing crafted inputs
0.1.1
0.1.1
Summary
blurhash panics on parsing crafted inputs
Details
Impact
The blurhash parsing code may panic due to multiple panic-guarded out-of-bounds accesses on untrusted input.
In a typical deployment, this may get triggered by feeding a maliciously crafted blurhashes over the network. These may include:
- UTF-8 compliant strings containing multi-byte UTF-8 characters
Patches
The patches will be released under version 0.2.0, which requires user intervention because of slight API churn.
Workarounds
n.a.
References
n.a.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Impacted packages
Timeline
Published
3 years ago
September 21, 2023 at 05:10 PM UTC
Fixed (0.2.0)
3 years ago
September 19, 2023 at 11:34 AM UTC
Last Modified
7 months ago
March 16, 2026 at 03:02 AM UTC