How many CVEs does SixLabors imagesharp have?

SixLabors imagesharp has 7 published CVE records since 2024.

How many SixLabors imagesharp CVEs are in CISA KEV?

None of SixLabors imagesharp's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for SixLabors imagesharp vulnerabilities?

Yes — 2 of SixLabors imagesharp's CVEs have a known public exploit.

Which versions of SixLabors imagesharp are affected?

66 distinct SixLabors imagesharp versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in SixLabors imagesharp CVEs?

SixLabors imagesharp's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-789 (Memory Allocation with Excessive Size Value), CWE-226 (Sensitive Information in Resource Not Removed Before Reuse), CWE-400 (Uncontrolled Resource Consumption).

What is the average severity of SixLabors imagesharp CVEs?

The average CVSS base score across SixLabors imagesharp's scored CVEs is 6.9.

SixLabors imagesharp Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every SixLabors imagesharp version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0.37 CVEs
2.0.07 CVEs
2.1.07 CVEs
2.1.17 CVEs
2.1.27 CVEs
2.1.37 CVEs
2.1.47 CVEs
2.1.57 CVEs
2.1.67 CVEs
3.0.07 CVEs
3.0.17 CVEs
3.1.07 CVEs
3.1.17 CVEs
3.1.27 CVEs
2.1.76 CVEs
3.1.36 CVEs
2.1.84 CVEs
3.1.44 CVEs
< 2.1.82 CVEs
< 2.1.92 CVEs
>= 3.0.0, < 3.1.42 CVEs
>= 3.0.0, < 3.1.52 CVEs
2.1.92 CVEs
3.1.52 CVEs
3.1.62 CVEs
< 2.1.101 CVE
< 2.1.111 CVE
< 2.1.71 CVE
>= 3.0.0, < 3.1.111 CVE
>= 3.0.0, < 3.1.31 CVE
>= 3.0.0, < 3.1.71 CVE
2.1.101 CVE
3.1.101 CVE
3.1.71 CVE
3.1.81 CVE
3.1.91 CVE

Version ranges

< 2.1.82 CVEs
< 2.1.92 CVEs
2.1.0 <= v < 2.1.92 CVEs
3.0.0 <= v < 3.1.42 CVEs
3.0.0 <= v < 3.1.52 CVEs
3.0.0 <= v <= 3.1.42 CVEs
3.1.0 <= v < 3.1.52 CVEs
< 2.1.101 CVE
< 2.1.71 CVE
3.0.0 <= v < 3.1.71 CVE
3.1.0 <= v < 3.1.31 CVE

Fixed in

> 3.1.42 CVEs
2.1.82 CVEs
2.1.92 CVEs
3.1.42 CVEs
3.1.52 CVEs
65bd9b5ccdecf4441321b661635c1469dc7b08e42 CVEs
9816ca45016c5d3859986f3c600e8934bc450a562 CVEs
da5f09a42513489fe359578d81cec2f15ba588ba2 CVEs
f21d64188e59ae9464ff462056a5e29d8e618b272 CVEs
2.1.101 CVE
2.1.71 CVE
3.1.31 CVE
3.1.71 CVE

Find a version

7 CVEs

Sort

ImageSharp Triggers an Infinite Loop in its GIF Decoder When Skipping Malformed Comment Extension Blocks
CVE-2025-54575
Public exploit
Patch
CWE-400
Medium · CVSS 5.3
EPSS 0.4% (30th pct)2025-07-30
Out-of-bounds Write in SixLabors ImageSharp
CVE-2025-27598
Public exploit
Patch
CWE-787
High · CVSS 7.5
EPSS 0.5% (42th pct)2025-03-06
Medium vulnerability · 2024-07-22
CVE-2024-41132
Patch
CWE-789
Medium · CVSS 6.9
EPSS 0.8% (52th pct)2024-07-22
High vulnerability · 2024-07-22
CVE-2024-41131
Patch
CWE-787
High · CVSS 8.7
EPSS 0.7% (48th pct)2024-07-22
Medium vulnerability · 2024-04-15
CVE-2024-32036
Patch
CWE-226
Medium · CVSS 6.5
EPSS 0.6% (44th pct)2024-04-15
Medium vulnerability · 2024-04-15
CVE-2024-32035
Patch
CWE-789
Medium · CVSS 6.5
EPSS 0.6% (47th pct)2024-04-15
Use After Free in SixLabors.ImageSharp
CVE-2024-27929
Patch
CWE-416
High · CVSS 7.1
EPSS 0.4% (28th pct)2024-03-05

SixLabors imagesharp Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other SixLabors products

Frequently asked questions

References

Track SixLabors imagesharp vulnerabilities