Category

Buffer Parsing

Security vulnerabilities and automated fixes for buffer parsing issues

1 post found

high3 min

image-size 1.2.1 DoS: Zero-Valued Dimensions in Image Buffer Parser

A high-severity denial-of-service vulnerability in image-size 1.2.1 allows attackers to crash Node.js services using malicious image buffers with zero-valued dimensions. The fix removes the vulnerable `queue` dependency and tightens dimension validation in version 2.0.3.

#security#image-size#denial-of-service+4 more
A
anupamme
Sep 30, 2026