Go/github.com/imgproxy/imgproxy/v3 CVE-2023-1496: unknown, EPSS 1.58%
imgproxy Cross-site Scripting vulnerability in github.com/imgproxy/imgproxy
Action: Upgrade github.com/imgproxy/imgproxy/v3 to 3.14.0 or later.
go get github.com/imgproxy/imgproxy/v3@v3.14.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.14.0 | - |
Fixed versions
| 3.14.0 |
Sources
- osv: GO-2023-1651#Go/github.com/imgproxy/imgproxy/v3
- https://github.com/advisories/GHSA-ch9g-x9j7-rcgp
- https://nvd.nist.gov/vuln/detail/CVE-2023-1496
- https://github.com/imgproxy/imgproxy/commit/62f8d08a93d301285dcd1dabcc7ba10c6c65b689
- https://huntr.dev/bounties/de603972-935a-401a-96fb-17ddadd282b2
CVE-2023-1496 · published · modified · JSON