Critical DSA-5310-1 1 CVE

ruby-image-processing - security update

Published Dec 31, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	ruby-image-processing	1.10.3-1+deb11u1

Vulnerabilities 1

Critical 9.8

CVE-2022-24720

Improper Input Validation in image_processing

image_processing is an image processing wrapper for libvips and ImageMagick/GraphicsMagick. Prior to version 1.12.2, using the `#apply` method from image_processing to apply a series of operations that are coming from unsanitized user input allows the attacke…

janko image_processing ruby-image-processing image_processing Debian Ubuntu RubyGems

Mar 1, 2022