https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:02:02.248451+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-55497 CVE-2026-55497 — Cloudreve: Server crash through image decompression/pixel bomb in thumbnail & avatar decoding (DoS) 2026-10-06T09:02:02.266653+00:00

Affected: cloudreve

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the built-in thumbnail and avatar image decoders limit compressed file size but do not limit decoded pixel dimensions, allowing an authenticated user to submit a small PNG, JPEG, or GIF that triggers an unbounded allocation and terminates the Cloudreve process through fatal out-of-memory behavior. This issue is fixed in version 4.17.0.