VULNRABLE / Vulnerability / GHSA-mmq5-xm89-9pfg
GHSA-mmq5-xm89-9pfg
HIGH LOW github.com/imgproxy/imgproxy/v3 GHSA
Exploit verdict: No active-exploit signal
CVSS Score
8
Severity
HIGH
EPSS
—
Source
GHSA
Summary
imgproxy has unbounded memory allocation in ICO loader that allows unauthenticated memory-exhaustion DoS via crafted data_size field
What this means
GHSA-mmq5-xm89-9pfg is a high-severity vulnerability affecting github.com/imgproxy/imgproxy/v3, rated CVSS 8. Published October 30, 2026.
View full advisory at GHSA →