NuGet · Magick.NET-Q16-AnyCPU
ImageMagick: Information Disclosure in MNG decoder because allocated memory is left unchanged
In the MNG decoder there is a possible heap information disclosure because part of the pixels are left unchanged.
Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.
Check my repoSources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.