Homepage
About Snyk

images@3.2.3 vulnerabilities

Cross-platform image decoder(webp/png/jpeg/gif) and encoder(webp/png/jpeg) for Node.js

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the images package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Denial of Service (DoS)

images is a Cross-platform image decoder(webp/png/jpeg/gif) and encoder(webp/png/jpeg) for Node.js

Affected versions of this package are vulnerable to Denial of Service (DoS) due to providing unexpected input types to several different functions. This makes it possible to reach an assert macro, leading to a process crash.

Note: By providing some specific integer values (like 0) to the size function, it is possible to obtain a Segmentation fault error, leading to the process crash.

How to fix Denial of Service (DoS)?

There is no fixed version for images.

*
Go back to all versions of this package