Vulnerability GO-2023-1761
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
2 years ago
August 20, 2024 at 08:29 PM UTC
imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy
v1.1.1 - v2.2.11+incompatible
v1.1.1 - v2.2.11+incompatible
Summary
imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy
Details
imgproxy is vulnerable to Server-Side Request Forgery in github.com/imgproxy/imgproxy
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Critical
6 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
>=4.0.0 <4.0.16 GHSA-hff9-5pqw-6w9f
>=4.0.0 <4.0.16 GHSA-hff9-5pqw-6w9f
Critical
6 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
>=4.0.0 <4.0.16 GHSA-hff9-5pqw-6w9f
>=4.0.0 <4.0.16 GHSA-hff9-5pqw-6w9f
Critical
6 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
>=4.0.0 <4.0.16 GHSA-hff9-5pqw-6w9f
>=4.0.0 <4.0.16 GHSA-hff9-5pqw-6w9f
High Risk
6 hours ago
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash
v3.3.0 - v3.31.4 GHSA-494m-4556-wf5p
v3.3.0 - v3.31.4 GHSA-494m-4556-wf5p
High Risk
6 hours ago
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field
v3.3.0 - v3.31.4 GHSA-mmq5-xm89-9pfg
v3.3.0 - v3.31.4 GHSA-mmq5-xm89-9pfg
Impacted packages
Timeline
Published
2 years ago
August 20, 2024 at 08:29 PM UTC
Fixed (v3.15.0)
3 years ago
April 10, 2023 at 05:29 PM UTC
Last Modified
8 months ago
March 03, 2026 at 04:53 AM UTC