GO-2025-3599

Source
https://pkg.go.dev/vuln/GO-2025-3599
Import Source
https://vuln.go.dev/ID/GO-2025-3599.json
JSON Data
https://api.osv.dev/v1/vulns/GO-2025-3599
Aliases
Published
2025-04-09T17:05:36Z
Modified
2025-04-09T17:42:01.114180Z
Summary
bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing in github.com/bep/imagemeta
Details

bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing in github.com/bep/imagemeta

Database specific
{
    "review_status": "UNREVIEWED",
    "url": "https://pkg.go.dev/vuln/GO-2025-3599"
}
References

Affected packages

Go / github.com/bep/imagemeta

Package

Name
github.com/bep/imagemeta
View open source insights on deps.dev
Purl
pkg:golang/github.com/bep/imagemeta

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.11.0