Security advisories

medium2026-03-12

CVE-2026-30226-devalue has prototype pollution in devalue.parse and devalue.unflatten

sveltejs/devalue · GHSA-cfw5-2vxh-hr84

high2026-03-12

CVE-2026-28693-ImageMagick: Integer overflow in DIB coder can result in out of bounds read or write

imagemagick/imagemagick · GHSA-hffp-q43q-qq76

high2026-03-12

CVE-2026-28691-ImageMagick has uninitialized pointer dereference in JBIG decoder

imagemagick/imagemagick · GHSA-wj8w-pjxf-9g4f

medium2026-03-12

CVE-2026-28690-ImageMagick has stack write buffer overflow in MNG encoder

imagemagick/imagemagick · GHSA-7h7q-j33q-hvpf

medium2026-03-12

CVE-2026-28688-ImageMagick has heap use-after-free in the MSL encoder

imagemagick/imagemagick · GHSA-xxw5-m53x-j38c

medium2026-03-12

CVE-2026-28687-ImageMagick has Heap Use-After-Free in ImageMagick MSL decoder

imagemagick/imagemagick · GHSA-fpvf-frm6-625q

medium2026-03-12

CVE-2026-28686-ImageMagick: Write heap-buffer-overflow in PCL encoder via undersized output buffer

imagemagick/imagemagick · GHSA-467j-76j7-5885

high2026-03-12

CVE-2026-28494-ImageMagick vulnerable to stack corruption through long morphology kernel names or arrays

imagemagick/imagemagick · GHSA-932h-jw47-73jm

medium2026-03-12

CVE-2026-28493-ImageMagick has Integer Overflow leading to out of bounds write in SIXEL decoder

imagemagick/imagemagick · GHSA-r39q-jr8h-gcq2

critical2026-03-12

CVE-2026-27591-Winter vulnerable to privilege escalation by authenticated backend users

wintercms/winter · GHSA-pgpf-m8m4-6cg6

medium2026-03-12

CVE-2026-26284-ImageMagick: Heap overflow in pcd decoder leads to out of bounds read.

imagemagick/imagemagick · GHSA-wrhr-rf8j-r842

medium2026-03-12

CVE-2026-25986-ImageMagick has heap buffer overflow in YUV 4:2:2 decoder

imagemagick/imagemagick · GHSA-mqfc-82jx-3mr2

medium2026-03-12

CVE-2026-25982-ImageMagick has Heap Out-of-Bounds Read in DCM Decoder (ReadDCMImage)

imagemagick/imagemagick · GHSA-pmq6-8289-hx3v

medium2026-03-12

CVE-2026-25971-ImageMagick: MSL - Stack overflow in ProcessMSLScript

imagemagick/imagemagick · GHSA-8mpr-6xr2-chhc

medium2026-03-12

CVE-2026-25970-ImageMagick Has Signed Integer Overflow in SIXEL Decoder, Leading to Memory Corruption

imagemagick/imagemagick · GHSA-xg29-8ghv-v4xr

high2026-03-12

CVE-2026-25968-ImageMagick: MSL attribute stack buffer overflow leads to out of bounds write.

imagemagick/imagemagick · GHSA-3mwp-xqp2-q6ph

critical2026-03-12

CVE-2026-3059-SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

sgl-project/sglang · GHSA-rgq9-fqf5-fv58

low2026-03-12

CVE-2026-2366-Keycloak vulnerable to authorization bypass via the Admin API

keycloak/keycloak · GHSA-r8jr-wg88-fq5c

critical2026-03-12

CVE-2026-3060-SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

sgl-project/sglang · GHSA-jx93-g359-86wm

high2026-03-12

CVE-2026-3989-SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization

sgl-project/sglang · GHSA-hvwj-8w5g-28rg