{"action":"Upgrade SixLabors.ImageSharp to 2.1.11 (2.x) or 3.1.11 (3.x) or later.","affected":[{"fixed":"2.1.11","introduced":"0"},{"fixed":"3.1.11","introduced":"3.0.0"}],"component":"SixLabors.ImageSharp","cve_ids":["CVE-2025-54575"],"ecosystem":"NuGet","epss":0.00449,"exploited":false,"fixed_versions":["2.1.11","3.1.11"],"ghsa_id":"GHSA-rxmq-m78w-7wmc","id":"tcs_01M5N90V931DQ7XXY9FNZ38VDN","modified_at":"2025-07-31T11:33:29.786975Z","published_at":"2025-07-30T13:23:01Z","references":["https://osv.dev/vulnerability/GHSA-rxmq-m78w-7wmc","https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-rxmq-m78w-7wmc","https://nvd.nist.gov/vuln/detail/CVE-2025-54575","https://github.com/SixLabors/ImageSharp/issues/2953","https://github.com/SixLabors/ImageSharp/commit/55e49262df9a057dff9b7807ed1b7bdb49187c3f","https://github.com/SixLabors/ImageSharp/commit/833f3ceec35af6b775950e06f03b934546cefbf6","https://github.com/SixLabors/ImageSharp"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-rxmq-m78w-7wmc","url":"https://osv.dev/vulnerability/GHSA-rxmq-m78w-7wmc"}],"summary":"SixLabors ImageSharp Has Infinite Loop in GIF Decoder When Skipping Malformed Comment Extension Blocks"}