https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:53:56 +0000 https://cve.radiocsirt.org/vuln/cve-2025-71319 <p><strong>Affected:</strong> image-size, Red Hat Discovery 2, Red Hat Trusted Artifact Signer 1.4, Red Hat Gatekeeper 3, Red Hat Build of Podman Desktop, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8 and 4 more</p> <p>image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can trigger an infinite loop in the JXL or HEIF image parsers by providing a crafted image containing a box with a size of zero, causing the offset to never advance and permanently hanging the application.</p> <p><strong>Affected:</strong> image-size, Red Hat Discovery 2, Red Hat Trusted Artifact Signer 1.4, Red Hat Gatekeeper 3, Red Hat Build of Podman Desktop, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Fuse 7, Red Hat JBoss Enterprise Application Platform 7, Red Hat JBoss Enterprise Application Platform 8 and 4 more</p> <p>image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in a recognized box-type. Attackers can trigger an infinite loop in the JXL or HEIF image parsers by providing a crafted image containing a box with a size of zero, causing the offset to never advance and permanently hanging the application.</p> https://cve.radiocsirt.org/vuln/cve-2025-71319