logo

Database

Reflected cross-site scripting (XSS) In magick.net-q16-hdri-anycpu

Description

ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797 An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 17

10

Aliases

1. GHSA-hc76-7mpc-qjqh2. GCVE-GHSA-hc76-7mpc-qjqh

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hc76-7mpc-qjqh2. https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.