https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T13:18:11.525861+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109398 CVE-2026-109398 — Gumlet php-image-resize before 3.0.1 Denial of Service via Decompression Bombs 2026-10-14T13:18:11.527536+00:00

Affected: gumlet php-image-resize

Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps, exhausting PHP memory and terminating the worker process.