imageproxy

imageproxy copied to clipboard

Resizing transparent animated gifs keeps previous frames

2

The [original gif](https://storage.googleapis.com/user-uploaded-stickers/1efee6fa-430f-4ab8-8a09-863c20dffc9e.gif) has a transparent background but when [resized](https://api.gifs.com/resize/211.2x/https://storage.googleapis.com/user-uploaded-stickers/1efee6fa-430f-4ab8-8a09-863c20dffc9e.gif) each previous frame is still visible. I think this might be related to #80.

montanaflynn

Denial of Service by Rendering Image that have very big pixel

4

## Description There is Denial of Service (DoS) because `imageproxy` didn't check the size of the pixel image ## Affected version Latest version (0.11.2) ## CVSS Score CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - 6.5...

daffainfo

build(deps): bump github.com/aws/aws-sdk-go from 1.42.53 to 1.44.89

1

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.42.53 to 1.44.89. Release notes Sourced from github.com/aws/aws-sdk-go's releases. Release v1.44.89 (2022-08-31) Service Client Updates service/cloudfront: Updates service documentation Update API documentation for CloudFront origin access control...

dependabot[bot]

build(deps): bump cloud.google.com/go/storage from 1.20.0 to 1.26.0

1

Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) from 1.20.0 to 1.26.0. Release notes Sourced from cloud.google.com/go/storage's releases. storage: v1.26.0 1.26.0 (2022-08-29) Features storage: export ShouldRetry (#6370) (0da9ab0), refs #6362 Bug Fixes storage: allow to use...

dependabot[bot]

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.1 to 1.13.0. Release notes Sourced from github.com/prometheus/client_golang's releases. 1.13.0 / 2022-08-06 [CHANGE] Minimum required Go version is now 1.17 (we also test client_golang against the new...

dependabot[bot]

imageproxy isn't for everyone. There are other projects with different goals, or forks of imageproxy that add features I won't merge upstream for whatever reason. I've long thought about adding...

willnorris

build(deps): bump github.com/aws/aws-sdk-go from 1.44.235 to 1.44.259

1

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.235 to 1.44.259. Release notes Sourced from github.com/aws/aws-sdk-go's releases. Release v1.44.259 (2023-05-08) Service Client Updates service/glue: Updates service API and documentation We don't do release notes https://w.amazon.com/bin/view/AWSDocs/common-tasks/release-notes...

dependabot[bot]

build(deps): bump github.com/prometheus/client_golang from 1.14.0 to 1.15.1

1

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.14.0 to 1.15.1. Release notes Sourced from github.com/prometheus/client_golang's releases. v1.15.1 Changes [BUGFIX] Fixed promhttp.Instrument* handlers wrongly trying to attach exemplar to unsupported metrics (e.g. summary), causing panics...

dependabot[bot]

build(deps): bump golang.org/x/image from 0.6.0 to 0.7.0

1

Bumps [golang.org/x/image](https://github.com/golang/image) from 0.6.0 to 0.7.0. Commits ed5dba0 go.mod: update golang.org/x dependencies 08ca817 font: have Glyph return !ok for U+FFFD substitute See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)...

dependabot[bot]

Bumps [github.com/peterbourgon/diskv](https://github.com/peterbourgon/diskv) from 0.0.0-20171120014656-2973218375c3 to 2.0.1+incompatible. Release notes Sourced from github.com/peterbourgon/diskv's releases. v2.0.1 Adds support for atomic filesystem ops via a new TempDir option. v2.0.0 Breaking changes made to the...

dependabot[bot]