Vulnerability GO-2026-6898
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:54 PM UTC
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field in github.com/imgproxy/imgproxy
*
*
Summary
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field in github.com/imgproxy/imgproxy
Details
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field in github.com/imgproxy/imgproxy
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash in github.com/imgproxy/imgproxy
* GO-2026-6895
* GO-2026-6895
Unknown
9 hours ago
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash in github.com/imgproxy/imgproxy
* GO-2026-6895
* GO-2026-6895
Unknown
9 hours ago
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash in github.com/imgproxy/imgproxy
>=3.3.0 GO-2026-6895
>=3.3.0 GO-2026-6895
Unknown
9 hours ago
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash in github.com/imgproxy/imgproxy
<4.0.17 GO-2026-6895
<4.0.17 GO-2026-6895
Unknown
9 hours ago
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution in github.com/imgproxy/imgproxy
* GO-2026-6897
* GO-2026-6897
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:54 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC