#imgproxy
LightNews LightNews
imgproxy.net
New patch release: v4.0.24
Release notes: buff.ly/N1crouX
Release v4.0.24 · imgproxy/imgproxy
Changed Updated dependencies. Fixed Exclude question marks (?) and hash symbols (#) from wildcard matching in URL patterns, such as in IMGPROXY_ALLOWED_SOURCES. Fixes potential security bypasses...
buff.ly
November 13, 2026 at 10:45 AM
imgproxy.net
New Terraform module for imgproxy! This time – for Microsoft Azure.
buff.ly/ltj2rR0
#imgproxy #DevOps #Terraform #Azure
Terraform Registry
Please enable Javascript to use this application
buff.ly
November 10, 2026 at 4:00 PM
throwable.bsky.social
📦 somehow-digital/imgproxy v1.1.0

imgproxy URL builder for PHP.

🔗 https://github.com/somehow-digital/php-imgproxy
November 9, 2026 at 10:14 AM
imgproxy.net
New patch release: v4.0.23:
buff.ly/nC6y6ic
Release v4.0.23 · imgproxy/imgproxy
Changed Updated dependencies. Fixed Video and audio responses are now served with a browser-friendly Content-Security-Policy header.
buff.ly
November 9, 2026 at 2:00 PM
stackflag.bsky.social
CVE-2026-123614 - imgproxy
Versions of imgproxy from 4.0.0 up to 4.0.15 may mishandle a specially crafted ICO image, causing memory corruption. This can make the service stop working or allow an attacker to run…

Too many irrelevant or confusing CVEs? Use stackflag.com

#imgproxy #CVE #infosec
CVE-2026-123614: imgproxy can be crashed or hijacked by crafted ICO file
Versions of imgproxy from 4.0.0 up to 4.0.15 may mishandle a specially crafted ICO image, causing memory corruption.
stackflag.com
November 8, 2026 at 2:30 AM
cybergeodigest.bsky.social
Today's CyberGeoDigest — 9 stories

Top: CVE-2026-123616: imgproxy ICO Loader Allows Unauthenticated Memory Exhaustion DoS

#InfoSec #CVE #CyberSecurity
CyberGeoDigest — 2026-11-08
9 curated cybersecurity & geopolitical intel stories. Nation-state ops, threat intel, policy & vulnerabilities.
cybergeodigest.com
November 8, 2026 at 2:08 PM
thehackerwire.bsky.social
🟠 CVE-2026-123616 - High (7.5)

imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the IC...

https://www.thehackerwire.com/vulnerability/CVE-2026-123616/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
November 8, 2026 at 3:32 AM
thehackerwire.bsky.social
🔴 CVE-2026-123614 - Critical (9.8)

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remo...

https://www.thehackerwire.com/vulnerability/CVE-2026-123614/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
November 8, 2026 at 3:32 AM
offseq.bsky.social
CRITICAL heap overflow (CVE-2026-123614) in imgproxy v4.0.0 – <4.0.16 enables remote code execution via malicious ICO files. Upgrade to 4.0.16+ ASAP. https://radar.offseq.com/threat/cve-2026-123614-heap-based-buffer-overflow-in-imgproxy-9b2b08ca2df50385 #OffSeq #imgproxy #Vulnerability
CVE-2026-123614: Heap-based Buffer Overflow in imgproxy
CVE-2026-123614 is a critical heap-based buffer overflow vulnerability in imgproxy's ICO loader affecting versions >=4.0.0 and <4.0.16. The vulnerability arises from an integer overflow in the data_size parameter that wraps the heap allocat
radar.offseq.com
November 8, 2026 at 3:00 AM
potato.software
Today's PotatoGeoDigest — 9 stories

Top: CVE-2026-123616: imgproxy ICO Loader Allows Unauthenticated Memory Exhaustion DoS

#InfoSec #CVE #PotatoSecurity
November 8, 2026 at 2:08 PM
thehackerwire.bsky.social
🟠 CVE-2026-123615 - High (7.5)

imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BM...

https://www.thehackerwire.com/vulnerability/CVE-2026-123615/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
November 8, 2026 at 3:32 AM
offseq.bsky.social
imgproxy <4.0.16 has CRITICAL integer overflow (CVE-2026-123614) in ICO loader — remote attackers can trigger RCE or crashes. Upgrade to 4.0.16+ now. 🔒 More info: https://radar.offseq.com/threat/imgproxy-from-400-before-4016-contains-an-integer-overflow-in-the-ico-loader-that-allows-remote-ec5a1c...
imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader
The vulnerability in imgproxy (CVE-2026-123614) is an integer overflow in the ICO loader component present in versions 4.0.0 before 4.0.16. Attackers can submit a specially crafted ICO image where the data_size field causes an integer overf
radar.offseq.com
November 8, 2026 at 7:30 AM
euvd-bot.bsky.social
🚨 EUVD-2026-119375
📊 8.7/10
🏢 imgproxy

📝 imgproxy from 3.3.0 before 4.0.16 contains an unbounded memory allocation vulnerability in the ICO loader that fails to validate the data_size field. A...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119375

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:04 AM
euvd-bot.bsky.social
🚨 EUVD-2026-119374
📊 8.7/10
🏢 imgproxy

📝 imgproxy 3.3.0 before 4.0.17 contains an out-of-bounds heap read and write in the ICO loader's BMP header reconstruction (vips_foreign_load_ico_header ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119374

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:04 AM
euvd-bot.bsky.social
🚨 EUVD-2026-119373
📊 9.3/10
🏢 imgproxy

📝 imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to trigger a heap buffer overflow via a c...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-119373

#cybersecurity #infosec #cve #euvd
November 8, 2026 at 3:04 AM
mandrasch.bsky.social
"Website Relaunch: Wie die Vienna Capitals mit einem CMS-Wechsel ihre Redaktion unabhängig gemacht haben" #astro #strapi #redis #imgproxy #webdev
lean-coders.at/blog/website...
Website Relaunch: Vienna Capitals mit Astro und Strapi 5
Vom Contao-Altsystem zu Astro und Strapi 5: So lief der Website Relaunch der Vienna Capitals, mit 0,5 Sekunden Ladezeit und eigenständiger Redaktion.
lean-coders.at
November 9, 2026 at 5:25 PM
stemshop.bsky.social
🚨 CVE-2026-123614 — CVSS 9.3 CRITICAL

imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attacke...

🔎 https://stemshop.top/cve/CVE-2026-123614

#CVE #CyberSecurity #InfoSec
November 8, 2026 at 4:07 AM
skywatch.bsky.social
New bluesky-social repository created: imgproxy
GitHub - bluesky-social/imgproxy: Fast and secure standalone server for resizing, processing, and converting images on the fly
Fast and secure standalone server for resizing, processing, and converting images on the fly - bluesky-social/imgproxy
github.com
November 5, 2026 at 9:38 PM
imgproxy.net
New patch release: v4.0.22
Release notes: buff.ly/nSrzBke
Release v4.0.22 · imgproxy/imgproxy
Changed Updated dependencies. Fixed Minor bugs in bmp image loader.
buff.ly
November 5, 2026 at 4:15 PM
raven-sec.bsky.social
North Korea's $6.34B Binance heist + 3 zero-days

• TraderTraitor fake job interviews stole $6.34B
• CVE-2026-19868 bypasses VPN MFA (actively exploited)
• CVE-2026-123614 imgproxy CRITICAL heap overflow

5 sources verified · hackingallthethings.com
#infosec #threatintel #cybersecurity #NorthKorea
ThreatBits 2026-11-08: North Korea's $6.34B Binance heist + 3 zero-days 01 North Korea's TraderTraitor operation stole $6.34B from Binance using fake job interview malware, confirmed by the FBI. 02 CVE-2026-19868 in SonicOS bypasses SAML-enforced MFA on VPN logins when attackers have alternate credentials—actively exploited in the wild. 03 CVE-2026-123614 in imgproxy's ICO loader (CVSS 9.8 CRITICAL) triggers integer overflow, heap corruption, and code execution via crafted images. 04 Anthropic's Claude Code 'Don't Ask Again' feature has leaked passwords and API keys across 1,122 public GitHub repositories. 05 Hackers executed a $133 million fraud heist against French bank Crédit Mutuel Arkéa by compromising a service provider.
November 8, 2026 at 6:01 AM
imgproxy.net
We brought you not one but two Terraform modules to deploy imgproxy on AWS! Pick one, terraform apply, done.
ECS+EC2: buff.ly/gBj4d04
ECS+Fargate: buff.ly/qxcHhHm
Azure is next in the queue.
#Terraform #DevOps #AWS #imgproxy
Terraform Registry
Please enable Javascript to use this application
buff.ly
November 5, 2026 at 5:45 PM
golangoss.bsky.social
imgproxy by @imgproxy_net (⭐️ 11171)

Fast and secure standalone server for resizing, processing, and converting images on the fly

#go
November 4, 2026 at 12:25 PM
danielrlevy88.bsky.social
The chart from cdn.bsky.app is betting on whether the dozen would in fact fail to go all Republican.
Hey, I'm imgproxy!
cdn.bsky.app
November 4, 2026 at 4:48 AM
imgproxy.net
New patch release: v4.0.21
Release notes: buff.ly/LMHWz1D
Release v4.0.21 · imgproxy/imgproxy
Changed Updated dependencies. Fixed Fixed several vulnerabilities in BMP and ICO loaders.
buff.ly
November 2, 2026 at 6:05 PM
imgproxy.net
Deploy imgproxy to Google Cloud with ease!
The first official imgproxy's Terraform module is out: buff.ly/BOb34UE.
Modules for AWS and Azure are coming soon.
#Terraform #DevOps #imgproxy
Terraform Registry
Please enable Javascript to use this application
buff.ly
November 2, 2026 at 6:15 PM