Skip to content
OpenAdvisories

Vendor

image-size

3 known vulnerabilities.

Products

image-size 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-71329 Public exploit

    image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

    image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can tr…

    image-size image-size langfuse-3-worker image-size Wolfi npm
  • High 7.5
    CVE-2025-71330

    image-size 2.0.2 Denial of Service via Malformed ICNS Image Parsing

    image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer. Attackers can craft an ICNS buffer containing valid magic bytes an…

    image-size image-size langfuse-3-worker image-size Wolfi npm
  • High 7.5
    CVE-2025-71319

    image-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser

    image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can tr…

    image-size image-size image-size npm