Image-size vulnerabilities
We track 3 vulnerabilities in Image-size products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on June 10, 2026.
Latest Image-size vulnerabilities
- 7.5 High severity
image-size: Loop with Unreachable Exit Condition
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffer containing valid magic bytes and
- 7.5 High severity
image-size: Loop with Unreachable Exit Condition
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can tri
- 7.5 High severity
image-size: Loop with Unreachable Exit Condition
image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can tri