VendorsEvil Martiansimgproxyany version
Vulnerabilities

Evil Martians imgproxy any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-1496
Cross-site Scripting (XSS) - Reflected in imgproxy/imgproxy
Published 2023-03-19 · Modified
6.5EPSS 0.016
CVE-2023-30019
imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL parameter.
Published 2023-05-08 · Modified
5.3EPSS 0.022