Gumlet vulnerabilities
We track 1 vulnerability in Gumlet products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Gumlet vulnerabilities
- 7.5 High severity
php-image-resize: Improper Handling of Highly Compressed Data (Data Amplification)
Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compressed