Vendor

imgproxy

5 known vulnerabilities.

Products

imgproxy 4 imgproxy/imgproxy 1

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 5.3

CVE-2025-24354 Public exploit

imgproxy is vulnerable to SSRF against 0.0.0.0

imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

imgproxy imgproxy github.com/imgproxy/imgproxy/v2 github.com/imgproxy/imgproxy/v3 Go

Jan 27, 2025
Medium 6.5

CVE-2023-1496

Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy

Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0.

imgproxy imgproxy/imgproxy github.com/imgproxy/imgproxy/v3 github.com/imgproxy/imgproxy Go

Mar 19, 2023