CVE-2026-53504

Thumbor contains a Regex Denial of Service (ReDoS) vulnerability in the convolution filter that triggers exponential backtracking on crafted repeated numeric input. This affects versions prior to 7.8.0 and can cause a URL request to exhaust processing time. The issue is fixed in 7.8.0. Per the co...

PT-2026-66841

Name of the Vulnerable Software and Affected Versions Thumbor versions prior to 7.8.0 Description The convolution filter regular expression performs exponential backtracking when processing crafted repeated numeric input. This leads to a Regular Expression Denial of Service ReDoS, where a special...