~ / search / GHSA-ch9g-x9j7-rcgp

GHSA-ch9g-x9j7-rcgp

imgproxy Cross-site Scripting vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-1496

Packages

EcosystemPackageAffectedFixed in
Go github.com/imgproxy/imgproxy/v3 < 3.14.0 3.14.0

Details

As written in the advisory (Markdown source, shown as plain text).

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

References

External links from the advisory. They lead to third-party sites.