Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2026-53504 →
DEBIAN-CVE-2026-53504
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtra...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on crafted repeated numeric input, allowing a URL request to exhaust processing time. This issue is fixed in 7.8.0.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:14
thumbor
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.8.0-1"}]}]
Références
- advisory security-tracker.debian.org