Known vulnerabilities in ImageSharp

Vendor: Six Labors
Software: ImageSharp
Software CPE: cpe:2.3:a:six_labors:imagesharp:*:*:*:*:*:*:*:*
Website: https://github.com/SixLabors
Total vulnerabilities: 16
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ImageSharp ImageSharp is affected by 16 known vulnerabilities: 1 high, 15 medium Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU150208 - Sensitive Information in Resource Not Removed Before Reuse
 CWE-226 Medium
No
No
 4.1.2 16.09.2026 SB2026091650
#VU150207 - Out-of-bounds write
 CWE-787 Medium
No
No
 4.1.2 16.09.2026 SB2026091650
#VU150206 - Out-of-bounds write
 CWE-787 Medium
No
No
 4.1.2 16.09.2026 SB2026091650
#VU150205 - Out-of-bounds write
 CWE-787 Medium
No
No
 4.1.2 16.09.2026 SB2026091650
#VU150204 - Loop with Unreachable Exit Condition ('Infinite Loop')
 CWE-835 Medium
No
No
 4.1.2 16.09.2026 SB2026091650
#VU150203 - Out-of-bounds write
 CWE-787 Medium
No
No
 4.1.2 16.09.2026 SB2026091650
#VU150202 - Uncontrolled Memory Allocation
 CWE-789 Medium
No
No
 4.1.2 16.09.2026 SB2026091650
#VU144574 - Out-of-bounds write
 CWE-787 Medium
No
No
 4.1.1 21.08.2026 SB2026082169
#VU144573 - Out-of-bounds write
 CWE-787 Medium
No
No
 4.1.1 21.08.2026 SB2026082169
#VU144572 - Improper input validation
CVE-2025-54575		 CWE-20 Medium
No
No
 2.1.11, 3.1.11 30.07.2025 SB2025073056
#VU144570 - Out-of-bounds write
CVE-2025-27598		 CWE-787 Medium
No
No
 2.1.10, 3.1.7 06.03.2025 SB2025030683
#VU94834 - Out-of-bounds write
CVE-2024-41131		 CWE-787 Medium
No
No
 2.1.9, 3.1.5 29.07.2024 SB2024072926
#VU94833 - Uncontrolled Memory Allocation
CVE-2024-41132		 CWE-789 Medium
No
No
 2.1.9, 3.1.5 29.07.2024 SB2024072926
#VU88963 - Exposure of sensitive information to an unauthorized actor
CVE-2024-32036		 CWE-200 Medium
No
No
 2.1.8, 3.1.4 24.04.2024 SB2024042413
#VU88962 - Uncontrolled Memory Allocation
CVE-2024-32035		 CWE-789 Medium
No
No
 2.1.8, 3.1.4 24.04.2024 SB2024042413
#VU144571 - Use After Free
CVE-2024-27929		 CWE-416 High
No
No
 2.1.7, 3.1.3 05.03.2024 SB2024030587