Security Advisory

CVE-2026-53504

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-31 18:57:19
Last updated 2026-07-31 23:31:37
Assigner GitHub_M
CVSS score not scored
State PUBLISHED

Description

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the convolution filter regular expression performs exponential backtracking on crafted repeated numeric input, allowing a URL request to exhaust processing time. This issue is fixed in 7.8.0.