logo

Database

Lack of data validation - Path Traversal In magick.net-q16-anycpu

Description

ImageMagick: Policy Bypass due to an incomplete fix of CVE-2026-49219 An incomplete fix of CVE-2026-49219 could result in a policy bypass.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

1-10 of 17

10

Aliases

1. GHSA-56m6-8q75-f2rw2. GCVE-GHSA-56m6-8q75-f2rw

References

1. https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-56m6-8q75-f2rw2. https://github.com/dlemstra/Magick.NET/releases/tag/14.15.0

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.