github.com/imgproxy/imgproxy

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 5.3

CVE-2025-24354 Public exploit

imgproxy is vulnerable to SSRF against 0.0.0.0

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

imgproxy imgproxy github.com/imgproxy/imgproxy/v2 github.com/imgproxy/imgproxy/v3 Go

Jan 27, 2025
Medium 5.3

CVE-2023-30019

imgproxy is vulnerable to Server-Side Request Forgery

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.

github.com/imgproxy/imgproxy/v3 github.com/imgproxy/imgproxy github.com/imgproxy/imgproxy/v2 Go

May 8, 2023
Medium 6.5

CVE-2023-1496

Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

imgproxy imgproxy/imgproxy github.com/imgproxy/imgproxy/v2 github.com/imgproxy/imgproxy/v3 Go

Mar 19, 2023