CVE-2025-71319
1 advisory.
npm/image-size CVE-2025-71319: high 7.5, EPSS 0.73%
image-size Denial of Service via Infinite Loop during Image Processing
Action: Upgrade image-size to 1.2.1 or later.
npm i image-size@1.2.1npm i image-size@2.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 1.2.1 | - |
| 2.0.0 | 2.0.2 | - |
Fixed versions
| 1.2.1 | 2.0.2 |
Sources
- osv: GHSA-m5qc-5hw7-8vg7
- https://github.com/image-size/image-size/security/advisories/GHSA-m5qc-5hw7-8vg7
- https://nvd.nist.gov/vuln/detail/CVE-2025-71319
- https://github.com/image-size/image-size/commit/8994131c7c3ee8da1699e04700c95e0e683a0c68
- https://github.com/image-size/image-size
- https://joshua.hu/image-size-infinite-loop-dos-vulnerabilities
- https://web.archive.org/web/20260224152152/https://github.com/image-size/image-size/pull/439
- https://www.vulncheck.com/advisories/image-size-denial-of-service-via-infinite-loop-in-jxl-heif-parser
CVE-2025-71319 · published · modified · JSON