CVE-2024-41132
1 advisory.
NuGet/SixLabors.ImageSharp CVE-2024-41132: medium 5.3, EPSS 0.77%
SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder
Action: Upgrade SixLabors.ImageSharp to 2.1.9 (2.x) or 3.1.5 (3.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.9 | - |
| 3.0.0 | 3.1.5 | - |
Fixed versions
| 2.1.9 | 3.1.5 |
Sources
- osv: GHSA-qxrv-gp6x-rc23
- https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-qxrv-gp6x-rc23
- https://nvd.nist.gov/vuln/detail/CVE-2024-41132
- https://github.com/SixLabors/ImageSharp/pull/2759
- https://github.com/SixLabors/ImageSharp/pull/2764
- https://github.com/SixLabors/ImageSharp/pull/2770
- https://github.com/SixLabors/ImageSharp/commit/59de13c8cc47f2b402e2c43aa7024511d029d515
- https://github.com/SixLabors/ImageSharp/commit/9816ca45016c5d3859986f3c600e8934bc450a56
- https://github.com/SixLabors/ImageSharp/commit/b496109051cc39feee1f6cde48fca6481de17f9a
- https://docs.sixlabors.com/articles/imagesharp.web/processingcommands.html#securing-processing-commands
- https://docs.sixlabors.com/articles/imagesharp/security.html
- https://github.com/SixLabors/ImageSharp
CVE-2024-41132 · published · modified · JSON