VULNRABLE / Vulnerability / GHSA-hff9-5pqw-6w9f
GHSA-hff9-5pqw-6w9f
CRITICAL WATCH github.com/imgproxy/imgproxy/v3 GHSA
Exploit verdict: CVSS 9.5 · no EPSS data
CVSS Score
9.5
Severity
CRITICAL
EPSS
—
Source
GHSA
Summary
imgproxy has integer overflow in imgproxy ICO loader that causes denial of service and may permit remote code execution
What this means
GHSA-hff9-5pqw-6w9f is a critical-severity vulnerability affecting github.com/imgproxy/imgproxy/v3, rated CVSS 9.5. Published October 30, 2026.
View full advisory at GHSA →