Skip to main content
cve.nowby Sazabi
← NuGet
NuGetPackage

ImageSharp

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

Latest release
0.0.0: no advisory affects it
Newest unaffected release
Every release is affected by at least one advisory
Advisories
1 · 1 high
Releases
1 since 0.0.0
Registry
NuGet
Releases read
Nov 8, 2026

Version timeline

  • CVE-2026-106117
    No published release is affected
    No published release is affected
Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • ImageSharp: CCITT fax decompression (T4/Modified Huffman): unbounded WriteBits overflows strip buffer — heap OOB write in SixLabors.ImageSharp

    Affected: from 3.0.0, fixed in 3.2.0; from 4.0.0, fixed in 4.1.1.

    No fix released. The advisory names 3.2.0 and 4.1.1 as the fix, which the registry doesn't have yet.