CVE-2026-55497

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, the built-in thumbnail and avatar image decoders limit compressed file size but do not limit decoded pixel dimensions, allowing an authenticated user to submit a small PNG, JPEG, or GIF that triggers an unbounded...

CVE-2026-55497

creationtimestamp| type| source ---|---|--- 2026-07-24 22:35:12+00:00| published-proof-of-concept| https://github.com/cloudreve/cloudreve/security/advisories/GHSA-g9j2-8w95-3vwv...