bep/imagemeta allows a potentially large memory allocation in PNG and WebP parsing in github.com/bep/imagemeta
{ "url": "https://pkg.go.dev/vuln/GO-2025-3599", "review_status": "UNREVIEWED" }