CVE-2026-41309 - Vulnerability Analysis
HighCVSS: 8.2Last Updated: April 24, 2026
Open Source Social Network - Denial of Service
Published: April 24, 2026Updated: April 24, 2026Remote Exploitable
Overview
Open Source Social Network (OSSN) < 9.0 contains a denial of service caused by processing specially crafted images with extreme pixel dimensions, letting attackers exhaust server resources, exploit requires uploading large images.
Severity & Score
Severity: High
CVSS Score: 8.2
Impact
Attackers can exhaust server memory and CPU, causing denial of service and service unavailability.
Mitigation
Upgrade to OSSN 9.0 or later with improved image validation and resource management.
References
- https://github.com/opensource-socialnetwork/opensource-socialnetwork/commit/12357113b3be189da7f6e429979a464e4f982117
- https://github.com/opensource-socialnetwork/opensource-socialnetwork/issues/2535
- https://github.com/opensource-socialnetwork/opensource-socialnetwork/security/advisories/GHSA-72qf-xrcw-fhr2
Related Resources
Details
- CVE ID
- CVE-2026-41309
- Severity
- High
- CVSS Score
- 8.2
- Type
- denial_of_service
- Status
- new
CWE
- CWE-400
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H