Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: image-size Clear all filters
TI-2025-43450 CVE-2025-71329 · GHSA-5p2g-fcmc-qvqq

image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

Priority HIGH 77

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0043 Published 2026-06-10 Partial fix · 2.0.3 CWE-835
TI-2025-43451 CVE-2025-71330 · GHSA-w3rx-r6r6-pgpr

image-size 2.0.2 Denial of Service via Malformed ICNS Image Parsing

Priority HIGH 77

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0043 Published 2026-06-10 Partial fix · 2.0.3 CWE-835
TI-2025-43440 CVE-2025-71319 · GHSA-m5qc-5hw7-8vg7

image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

Priority HIGH 77

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00729 Published 2026-06-09 Partial fix · 1.2.1, 2.0.2 CWE-835