Go/github.com/imgproxy/imgproxy/v3 CVE-2023-1496: medium 5.4, EPSS 1.58%

imgproxy Cross-site Scripting vulnerability

Action: Upgrade github.com/imgproxy/imgproxy/v3 to 3.14.0 or later.

go get github.com/imgproxy/imgproxy/v3@v3.14.0

Affected

Fixed versions

Sources

• osv: GHSA-ch9g-x9j7-rcgp
• https://nvd.nist.gov/vuln/detail/CVE-2023-1496
• https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689
• https://github.com/imgproxy/imgproxy
• https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2

CVE-2023-1496 · published 2023-03-19T18:30:24Z · modified 2024-08-20T20:58:42.803364Z · JSON