VDB

GO-2025-3599

GO-2025-3599 PUBLISHED

bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing in github.com/bep/imagemeta

Affected Products

VendorProductVersions
github.combep/imagemeta0, 0

Timeline

  • Apr 9, 2025 CVE Published
  • Feb 4, 2026 CVE Updated
  • May 1, 2026 Security Advisory
Open in Interactive Console →
$ Console Community · 100/wk Open console ›