{"action":"Upgrade github.com/bep/imagemeta to 0.10.0 or later.","affected":[{"fixed":"0.10.0","introduced":"0"}],"component":"github.com/bep/imagemeta","cve_ids":["CVE-2025-32024"],"ecosystem":"Go","epss":0.00184,"exploited":false,"fixed_versions":["0.10.0"],"ghsa_id":"GHSA-q7rw-w4cq-2j6w","id":"tcs_01M5KG7X9DNZ9KH4Q2301329TE","modified_at":"2026-02-04T03:08:57.510595Z","published_at":"2025-04-09T17:05:36Z","references":["https://osv.dev/vulnerability/GO-2025-3598","https://github.com/bep/imagemeta/security/advisories/GHSA-q7rw-w4cq-2j6w","https://nvd.nist.gov/vuln/detail/CVE-2025-32024","https://github.com/bep/imagemeta/commit/4fd89616d8bf7f9bb892360d3fb19080ec2b4602"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GO-2025-3598","url":"https://osv.dev/vulnerability/GO-2025-3598"},{"source":"nvd","source_id":"CVE-2025-32024","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32024"}],"summary":"bep/imagemeta allows excessively large EXIF data structures in github.com/bep/imagemeta"}