CVE-2019-10787: Dnt Im-Resize

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

im-resize through 2.3.2 allows remote attackers to execute arbitrary commands via the "exec" argument. The cmd argument used within index.js, can be controlled by user without any sanitization.

Affected products

• Dnt Im-Resize: up to and including 2.3.2

Published 2020-02-04. Last modified 2026-06-17.