probe-image-size vulnerabilities

1 known vulnerability in probe-image-size from Nodeca. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  probe-image-size: Uncontrolled Resource Consumption

  CVE-2026-104861Oct 2, 2026Nodeca

  probe-image-size gets image dimensions without downloading the entire file. Prior to 7.4.0, lib/parse_sync/svg.js and lib/parse_stream/svg.js use the searching regular expression /<[-_.:a-zA-Z0-9][^>]*>/, which repeatedly scans to the end of input when attacke