Low
CVE-2026-61866
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Low
CVE-2026-61865
ImageMagick: Memory Leak in hough lines operation when an operation fails
Low
CVE-2026-61864
ImageMagick: Memory Leak in color transformation to log colorspace when operation fails
Low
CVE-2026-61863
ImageMagick: Memory Leak in TIFF encoder when a temporary file could not be created.
Low
CVE-2026-61862
ImageMagick: Information Disclosure when printing profiles with debug enabled
Low
CVE-2026-61861
ImageMagick: Use-After-Free in FormatMagickCaption when memory allocation fails
Low
CVE-2026-61860
ImageMagick: Use-After-Free when freetype initialization fails
Low
CVE-2026-61859
ImageMagick: Policy Bypass in script operation due to missing checks
Low
CVE-2026-61858
ImageMagick: Policy Bypass in APNG encoder and delegates due to a missing check
Low
CVE-2026-61857
ImageMagick: Heap-use-after-free via XMP profile could result in a crash
Medium
ghsa-hc76-7mpc-qjqh
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
Medium
ghsa-56m6-8q75-f2rw
ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219
Low
CVE-2026-61465
ImageMagick: Policy Bypass possible with matrix-backed operations
High
CVE-2026-55685
React Router: Unauthenticated Denial of Service via Inefficient Route Matching
Medium
CVE-2026-55628
ImageMagick: Policy Bypass in concatenate operation due to missing checks
Medium
CVE-2026-55597
ImageMagick: Heap Buffer Over-Write in JP2 encoder when due to incorrect handling of arguments
Medium
CVE-2026-55595
ImageMagick: Infinite Loop in connected-components when providing invalid arguments
Medium
CVE-2026-55594
ImageMagick: Stack Overflow in MVG decoder due to missing depth check.
High
CVE-2026-55575
LiquidJS: `pop` filter bypasses `memoryLimit` accounting that its array-filter siblings enforce
Medium
CVE-2026-55510
ImageMagick: Use-After-Free in crafted 8BIM when identifying an image
High
CVE-2026-54673
electron-updater: Cross-origin redirect leaks `PRIVATE-TOKEN` and mixed-case `Authorization` credentials in `builder-util-runtime`
High
CVE-2026-54672
electron-updater: Uncontrolled search path elements within `AppImage` built by `app-builder-lib`
High
CVE-2026-16572
LogMyTrip <= 1.9 - Unauthenticated SQL Injection
High
CVE-2026-16060
Insert or Embed Articulate Content into WordPress <= 4.3000000027 - Authenticated (Editor+) Arbitrary File Upload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.