Read the docs

image-size

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

image-size records in CISA KEV

No image-size vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority HIGH 77

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0043 Published 2026-06-10 Partial fix · 2.0.3 CWE-835
Priority HIGH 77

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0043 Published 2026-06-10 Partial fix · 2.0.3 CWE-835
Priority HIGH 77

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00729 Published 2026-06-09 Partial fix · 1.2.1, 2.0.2 CWE-835
Open these records in search →