Skip to content
OpenAdvisories

Product · gumlet

php-image-resize

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-109398

    Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs

    Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compresse…

    gumlet php-image-resize