Debian/thumbor: high 7.5
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on crafted repeated numeric input, allowing
Action: Upgrade thumbor to 7.8.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.8.0-1 | - |
Fixed versions
| 7.8.0-1 |
Sources
published · modified · JSON