Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/golang.org/x/image@0.38.0
purl pkg:golang/golang.org/x/image@0.38.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-yj5c-4wbb-gbcx Go Images vulnerable to an out-of-memory error via a crafted TIFF file A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB of memory, causing either excessive resource consumption or an out-of-memory error. CVE-2026-33809
GHSA-44p7-9xx4-hf2g

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-07T01:27:45.951925+00:00 GithubOSV Importer Fixing VCID-yj5c-4wbb-gbcx https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-44p7-9xx4-hf2g/GHSA-44p7-9xx4-hf2g.json 38.6.0
2026-04-01T12:53:24.532828+00:00 GithubOSV Importer Fixing VCID-yj5c-4wbb-gbcx https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/03/GHSA-44p7-9xx4-hf2g/GHSA-44p7-9xx4-hf2g.json 38.0.0