AIKIDO-2025-10626

TL;DR

Affected versions of this package are vulnerable to a Denial-of-Service (DoS) attack because they implicitly allowed the creation of image descriptors with a negative or unknown size. An attacker could exploit this by providing a maliciously crafted image manifest containing such a descriptor, which, when processed, would cause an infinite read loop or excessive resource consumption, ultimately crashing the application. This flaw is due to an overly permissive interpretation of the specification, which has since been clarified to explicitly disallow unknown sizes for most descriptors as they are a classic DoS vector.