Security advisories

low2026-07-24

ImageMagick: Memory Leak in TIFF encoder when an allocation fails

imagemagick/imagemagick · GHSA-jfq9-q63x-rc63

low2026-07-24

ImageMagick: Memory Leak in JNG encoder when a blob could not be opened

imagemagick/imagemagick · GHSA-99w9-hv66-rfv7

low2026-07-24

ImageMagick: Memory Leak in hough lines operation when an operation fails

imagemagick/imagemagick · GHSA-j8rh-v2r8-v94x

low2026-07-24

ImageMagick: Memory Leak in color transformation to log colorspace when operation fails

imagemagick/imagemagick · GHSA-7c7m-fpjw-gwcq

low2026-07-24

ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.

imagemagick/imagemagick · GHSA-6vxp-gfwf-hcr9

low2026-07-24

ImageMagick: Information Disclosure when printing profiles with debug enabled

imagemagick/imagemagick · GHSA-hwf3-r46v-5ggx

low2026-07-24

ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails

imagemagick/imagemagick · GHSA-qvxh-prvr-85w2

low2026-07-24

ImageMagick: Use-After-Free when freetype initialization fails

imagemagick/imagemagick · GHSA-6jwg-7q3p-5fqm

low2026-07-24

ImageMagick: Policy Bypass in script operation due to missing checks

imagemagick/imagemagick · GHSA-vghg-5jrg-2398

low2026-07-24

ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check

imagemagick/imagemagick · GHSA-v3j6-27vc-7pw2

low2026-07-24

ImageMagick: Heap-use-after-free via XMP profile could result in a crash

imagemagick/imagemagick · GHSA-qh5g-q395-cx4j

medium2026-07-24

ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797

imagemagick/imagemagick · GHSA-hc76-7mpc-qjqh

medium2026-07-24

ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219

imagemagick/imagemagick · GHSA-56m6-8q75-f2rw

low2026-07-24

ImageMagick: Policy Bypass possible with matrix-backed operations

imagemagick/imagemagick · GHSA-rvhp-75f6-9jqh

high2026-07-24

Quinn: Remote memory exhaustion in quinn-proto from unbounded out-of-order stream reassembly

quinn-rs/quinn · GHSA-4w2j-m93h-cj5j

high2026-07-24

CVE-2026-55685-React Router: Unauthenticated Denial of Service via Inefficient Route Matching

remix-run/react-router · GHSA-chx6-hx7r-mcp5

medium2026-07-24

CVE-2026-55628-ImageMagick: Policy Bypass in concatenate operation due to missing checks

imagemagick/imagemagick · GHSA-82mp-vp5c-9pf7

medium2026-07-24

CVE-2026-55597-ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments

imagemagick/imagemagick · GHSA-c4v7-w88g-m6c4

medium2026-07-24

CVE-2026-55595-ImageMagick: Infinite Loop in connected-components when providing invalid arguments

imagemagick/imagemagick · GHSA-qhmf-7fc4-8q3h

medium2026-07-24

CVE-2026-55594-ImageMagick: Stack Overflow in MVG decoder due to missing depth check.

imagemagick/imagemagick · GHSA-mx48-2qq3-23hf