Security advisories

high2026-06-25

CVE-2026-53460-ImageMagick: Policy Bypass can Trigger an Out-of-Memory condition

imagemagick/imagemagick · GHSA-q62c-h75r-2xhc

medium2026-06-25

CVE-2026-49219-ImageMagick: Policy Bypass can read disallowed files via symlink

imagemagick/imagemagick · GHSA-xcjm-wqff-m669

high2026-06-25

CVE-2026-49218-ImageMagick: Policy Bypass in DCM decoder could result in image with invalid dimensions

imagemagick/imagemagick · GHSA-8pj9-6897-74xc

medium2026-06-25

CVE-2026-48994-ImageMagick has a Heap Buffer Over-Write in MAT decoder on 32-bit systems

imagemagick/imagemagick · GHSA-4v89-6mgq-6rgc

medium2026-06-25

CVE-2026-48734-ImageMagick Vulnerable to Stack Overflow in its MVG Decoder

imagemagick/imagemagick · GHSA-h36c-3666-h489

medium2026-06-25

CVE-2026-48733-ImageMagick has an Infinite Loop in subimage-search with crafted image

imagemagick/imagemagick · GHSA-5v62-8fq6-cp9m

medium2026-06-25

CVE-2026-48724-ImageMagick has a Heap Buffer Underwrite in the Floyd-Steinberg depth dithering method

imagemagick/imagemagick · GHSA-2hhq-c99x-492r

medium2026-06-25

CVE-2026-48722-nextflow auth login command has incorrect default permissions

nextflow-io/nextflow · GHSA-92qf-fcph-v5wr

high2026-06-25

CVE-2026-48702-Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic

sigstore/rekor · GHSA-47q9-m4ww-924m

medium2026-06-25

CVE-2026-48529-GitHub MCP Server: Lockdown mode singleton in HTTP server causes cross-user GraphQL client confusion

github/github-mcp-server · GHSA-pjp5-fpmr-3349

medium2026-06-25

CVE-2026-48517-MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments

messagepack-csharp/messagepack-csharp · GHSA-qhmf-xw27-6rqr

medium2026-06-25

CVE-2026-48516-MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings

messagepack-csharp/messagepack-csharp · GHSA-q2h6-ghwm-5qm8

medium2026-06-25

CVE-2026-48515-MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions

messagepack-csharp/messagepack-csharp · GHSA-cxmj-83gh-fp49

medium2026-06-25

CVE-2026-48514-MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length

messagepack-csharp/messagepack-csharp · GHSA-w567-gjr2-hm5j

medium2026-06-25

CVE-2026-48513-MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement

messagepack-csharp/messagepack-csharp · GHSA-wfr3-xj75-pfwh

medium2026-06-25

CVE-2026-48512-MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement

messagepack-csharp/messagepack-csharp · GHSA-cj9g-3mj2-g8vv

medium2026-06-25

CVE-2026-48511-MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps

messagepack-csharp/messagepack-csharp · GHSA-2x83-8g95-xh59

medium2026-06-25

CVE-2026-48510-MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths

messagepack-csharp/messagepack-csharp · GHSA-v72x-2h86-7f8m

medium2026-06-25

CVE-2026-48509-MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies

messagepack-csharp/messagepack-csharp · GHSA-2f33-pr97-265q

high2026-06-25

CVE-2026-48508-Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission

netflix/lemur · GHSA-qcqw-jwxc-2hqg