{"action":"Upgrade thumbor to 7.8.0 or later.","affected":[{"fixed":"7.8.0","introduced":"0"}],"component":"thumbor","cve_ids":["CVE-2026-53503"],"ecosystem":"PyPI","exploited":false,"fixed_versions":["7.8.0"],"ghsa_id":"GHSA-cqjp-jf4r-h5q9","id":"tcs_01M5KFDHCWAV1WN30KT523XJZP","modified_at":"2026-08-04T14:41:06.639351419Z","published_at":"2026-07-31T18:54:55Z","references":["https://osv.dev/vulnerability/GHSA-cqjp-jf4r-h5q9","https://github.com/thumbor/thumbor/security/advisories/GHSA-cqjp-jf4r-h5q9","https://github.com/thumbor/thumbor/commit/447e192e3fb92e64c12e5354a56a4a7133f69d73","https://github.com/thumbor/thumbor","https://github.com/thumbor/thumbor/releases/tag/7.8.0"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cqjp-jf4r-h5q9","url":"https://osv.dev/vulnerability/GHSA-cqjp-jf4r-h5q9"}],"summary":"Thumbor convolution filter allows divide-by-zero in C extension leading to remote DoS"}