Open Source Social Network (OSSN) is open-source social networking software developed in PHP. Versions prior to 9.0 are vulnerable to resource exhaustion. An at…

Open Source Social Network (OSSN) versions prior to 9.0 are vulnerable to resource exhaustion attacks. Attackers can upload specially crafted images with extreme pixel dimensions (10000x10000 pixels) that consume significant memory and CPU during decompression and resizing, leading to Denial of Service conditions. The compressed file size may be small on disk but causes server resource exhaustion during processing. OSSN 9.0 introduces stricter image dimension validation and improved resource management. Immediate mitigation includes adjusting PHP memory limits and implementing pixel dimension checks before processing.