Vulnerability Database · Packagist · verbb/image-resizer · Version
verbb/image-resizer 2.0.6
2.0.6 is affected by 2 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to.
Critical 0 High 1 Medium 1 Low 0 Unrated 0
-
Database updated 23/Oct/2026
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
verbb/image-resizer 2.0.6 vulnerabilities
2 vulnerabilities cover verbb/image-resizer 2.0.6. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2020-13458: Image Resizer Cross-Site Request Forgery (CSRF) | 8.8 high | 2.0.9 | 24 May 2022 |
| CVE-2020-13459: Image Resizer Cross-site Scripting (XSS) in the Bulk Resize action | 5.4 medium | 2.0.9 | 24 May 2022 |
Looking for another version, or everything Vulert holds for verbb/image-resizer?
Questions
About verbb/image-resizer 2.0.6
Is verbb/image-resizer 2.0.6 vulnerable?
Yes. 2 vulnerabilities in the Vulert database cover verbb/image-resizer 2.0.6: 0 critical, 1 high, 1 medium and 0 low. Each entry above names the fixed version to move to.
How do I monitor verbb/image-resizer for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the verbb/image-resizer version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.