VULNRABLE / Vulnerability / GHSA-494m-4556-wf5p
GHSA-494m-4556-wf5p
HIGH LOW github.com/imgproxy/imgproxy/v3 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
—
Source
GHSA
Summary
imgproxy has out-of-bounds heap read/write in ICO loader BMP header reconstruction that allows unauthenticated remote worker crash
What this means
GHSA-494m-4556-wf5p is a high-severity vulnerability affecting github.com/imgproxy/imgproxy/v3, rated CVSS 8. Published October 30, 2026.
View full advisory at GHSA →