VYPR

Thumbor

by Globo.com

Source repositories

CVEs (1)

  • CVE-2026-53503HigJul 31, 2026
    risk 0.42cvss 7.5epss 0.00

    Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, Thumbor's filters:convolution(, , <should_normalize>) filter passes the user-controlled value to a C extension (thumbor/ext/filters/_convolution.c) where it is used as a…