Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/SixLabors.ImageSharp@2.1.7
purl pkg:nuget/SixLabors.ImageSharp@2.1.7
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-mxmw-k9mg-tkgh Use After Free in SixLabors.ImageSharp ### Impact A heap-use-after-free flaw was found in ImageSharp's InitializeImage() function of PngDecoderCore.cs file. This vulnerability is triggered when an attacker passes a specially crafted PNG image file to ImageSharp for conversion, potentially leading to information disclosure. ### Patches The problem has been patched. All users are advised to upgrade to v3.1.3 or v2.1.7. ### Workarounds None ### References None CVE-2024-27929
GHSA-65x7-c272-7g7r

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-31T10:48:16.241249+00:00 GithubOSV Importer Fixing VCID-mxmw-k9mg-tkgh https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/03/GHSA-65x7-c272-7g7r/GHSA-65x7-c272-7g7r.json 38.6.0
2026-05-31T01:02:23.431218+00:00 GHSA Importer Fixing VCID-mxmw-k9mg-tkgh https://github.com/advisories/GHSA-65x7-c272-7g7r 38.6.0
2026-05-30T21:03:32.287218+00:00 GitLab Importer Fixing VCID-mxmw-k9mg-tkgh https://gitlab.com/gitlab-org/advisories-community/-/blob/main/nuget/SixLabors.ImageSharp/CVE-2024-27929.yml 38.6.0