Vulnerability GO-2026-6895
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:54 PM UTC
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash in github.com/imgproxy/imgproxy
*
*
Summary
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash in github.com/imgproxy/imgproxy
Details
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash in github.com/imgproxy/imgproxy
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxy
* GO-2026-6897
* GO-2026-6897
Unknown
9 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxy
* GO-2026-6897
* GO-2026-6897
Unknown
9 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxy
* GO-2026-6897
* GO-2026-6897
Unknown
9 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxy
>=4.0.0 <4.0.16 GO-2026-6897
>=4.0.0 <4.0.16 GO-2026-6897
Unknown
9 hours ago
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field in github.com/imgproxy/imgproxy
* GO-2026-6898
* GO-2026-6898
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:54 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC