logo

Database

Improper resource allocation In github.com/imgproxy/imgproxy/v2

Description

imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field in github.com/imgproxy/imgproxy

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. OSV-GO-2026-68982. GHSA-mmq5-xm89-9pfg3. GCVE-GHSA-mmq5-xm89-9pfg4. GHSA-mmq5-xm89-9pfg

References

1. https://github.com/imgproxy/imgproxy/security/advisories/GHSA-mmq5-xm89-9pfg2. https://github.com/imgproxy/imgproxy/commit/a821b6a4cb07a1bf2bb9077431d1c1e734d799173. https://github.com/imgproxy/imgproxy/releases/tag/v4.0.16

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.