← All vulnerabilities
MEDIUMSupply chain
GHSA-hc76-7mpc-qjqh#Magick.NET-Q8-x64
NuGet · Magick.NET-Q8-x64
Summary
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
Advisory details
An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder.
References
Related vulnerabilities
All Supply chain →- HIGHCVE-2026-61824
Defuddle vulnerable to XSS via unescaped attribute interpolation in site extractors
- MEDIUMGHSA-hc76-7mpc-qjqh#Magick.NET-Q16-HDRI-arm64
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
- MEDIUMGHSA-hc76-7mpc-qjqh#Magick.NET-Q8-x86
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
- MEDIUMGHSA-hc76-7mpc-qjqh#Magick.NET-Q8-arm64
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
- MEDIUMGHSA-hc76-7mpc-qjqh#Magick.NET-Q8-OpenMP-x64
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
- MEDIUMGHSA-hc76-7mpc-qjqh#Magick.NET-Q8-OpenMP-arm64
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797