Go/github.com/bep/imagemeta CVE-2025-32025: medium 6.9, EPSS 0.18%
bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing
Action: Upgrade github.com/bep/imagemeta to 0.11.0 or later.
go get github.com/bep/imagemeta@v0.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.0 | - |
Fixed versions
| 0.11.0 |
Sources
- osv: GHSA-fmhh-rw3h-785m
- nvd: CVE-2025-32025
- https://github.com/bep/imagemeta/security/advisories/GHSA-fmhh-rw3h-785m
- https://github.com/bep/imagemeta/commit/ee0de9b029f4e82106729f69559f27c9a404229d
- https://github.com/bep/imagemeta
CVE-2025-32025 · published · modified · JSON