imgproxy/imgproxy

on GitHub

120 releases

new releases every 2 weeks 5 days

last release was last Tuesday at 2:04 PM

last checked today at 1:37 AM

8268

Fast and secure standalone server for resizing and converting remote images

CVE History

CVE	Published	CVSS v2	CVSS v3
CVE-2023-30019	May 8, 2023	5.3 MEDIUM	N/A
imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.
CVE-2023-1496	March 19, 2023	5.4 MEDIUM	N/A
Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.