phpThumb project phpThumb

• CVE-2025-52994 Medium 4.9 gif_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. This is fixed in 1.7.23-202506081709. 0.7%