IM
Product
Image
by Golang · last CVE Apr 21, 2026
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch

Add Image to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33813
7.5
0%
Apr 21
Panic when decoding large WEBP image on 32-bit platforms in golang.org/x/image
Affected: before 0.39.0
CVE-2023-29408
6.5
1%
Aug 2
The TIFF decoder does not place a limit on the size of compressed tile data
Affected: before 0.10.0
CVE-2023-29407
6.5
1%
Aug 2
A maliciously-crafted image can cause excessive CPU consumption in decoding
Affected: before 0.10.0
CVE-2026-33812
6.1
0%
Apr 21
Excessive memory allocation when decoding malicious SFNT in golang.org/x/image
Affected: before 0.39.0
CVE-2022-41727
5.5
0%
Feb 28
An attacker can craft a malformed TIFF image which will consume a significant amount of memory when passed to DecodeConfig
Affected: before 0.5.0
Showing 5