CVE-2026-129447

Kroki versions before 0.36.0 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the /dbml/svg endpoint. The root cause is the improper neutralization of input, allowing unauthenticated attackers to inject javascript: hyperlinks by providing crafted DBML table url , headerco...

EUVD-2026-125946

Kroki before 0.36.0 contains a reflected cross-site scripting vulnerability in the /dbml/svg endpoint that allows unauthenticated attackers to inject javascript: hyperlinks by supplying crafted DBML table url, headercolor, or TableGroup color settings. Attackers can send a crafted SVG link that,...

CVE-2026-102359

Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKISAFEMODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including \openin, \read, \input, and \include. TeX Live's permissive openinany...

CVE-2026-102356

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

CVE-2026-102356 Kroki Mermaid companion SSRF via flowchart image URLs

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

CVE-2026-102356

The Kroki diagram creation tool is vulnerable to Server-Side Request Forgery (SSRF) in the optional Mermaid companion. Specifically, the mermaid/src/worker.js component (versions 0.26.0 until 0.31.2 ) fails to implement a network request policy when rendering attacker-controlled flowchart image n...

CVE-2026-102356 Kroki Mermaid companion SSRF via flowchart image URLs

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

CVE-2026-102356

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

CVE-2026-102356 Kroki Mermaid companion SSRF via flowchart image URLs

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

EUVD-2026-118388

Kroki creates diagrams from textual descriptions. From 0.26.0 until 0.31.2, the optional Mermaid companion's mermaid/src/worker.js renders attacker-controlled flowchart image nodes in headless Chromium without a network request policy, even when KROKISAFEMODE is set to secure. An actor who can...

CVE-2026-102359 Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives

Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKISAFEMODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including \openin, \read, \input, and \include. TeX Live's permissive openinany...

CVE-2026-102359

Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKISAFEMODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including \openin, \read, \input, and \include. TeX Live's permissive openinany...

CVE-2026-102359

In Kroki versions prior to 0.31.2 , the TikZ backend fails to properly restrict file access when KROKI_SAFE_MODE is enabled. While the tikz/tikz2svg guard blocks \verbatiminput, it allows native TeX file-read primitives such as \openin, \read, \input, and \include. Due to TeX Live's permissive op...

CVE-2026-102359 Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives

Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKISAFEMODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including \openin, \read, \input, and \include. TeX Live's permissive openinany...

EUVD-2026-118386

Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKISAFEMODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including \openin, \read, \input, and \include. TeX Live's permissive openinany...

PT-2026-138348

Name of the Vulnerable Software and Affected Versions Kroki versions prior to 0.31.2 Description When KROKI SAFE MODE is enabled, the TikZ backend guard only blocks verbatiminput, leaving native TeX file-read primitives such as openin, read, input, and include active. Due to the permissive openin...

Kroki security vulnerabilities

kroki is an open source icon creation tool from Yuzu tech. A security vulnerability exists in kroki, which stems from an insufficient cleanup of the convert function, which could result in sending requests to arbitrary URLs and disclosing sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2023-0050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions...

CVE-2023-0050

An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to...

BIT-GITLAB-2023-0050

An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. A specially crafted Kroki diagram could lead to a stored XSS on the client side which allows attackers to...