gifsicle@0.1.3 vulnerabilities

gifsicle wrapper that makes it seamlessly available as a local dependency

Direct Vulnerabilities

Known vulnerabilities in the gifsicle package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • C
Arbitrary Code Execution

gifsicle is a package that manipulates GIF image files in many different ways.

Affected versions of this package are vulnerable to Arbitrary Code Execution. Use-after-free in the read_gif function may result in potential code execution.

How to fix Arbitrary Code Execution?

Upgrade gifsicle to version 1.90 or higher.

<1.90