Vendor

imgproxy

5 known vulnerabilities.

Products

imgproxy 4 imgproxy/imgproxy 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2025-24354 Public exploit

imgproxy is vulnerable to SSRF against 0.0.0.0

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

imgproxy imgproxy github.com/imgproxy/imgproxy/v2 github.com/imgproxy/imgproxy/v3 Go

Jan 27, 2025