338 matches found
VectorFreed
VectorFreed Abstract This document introduces "VectorFreed", a vulnerability chain that begins with a use-after-free I @rafabd1 found in librsvg CVE-2026-96889. In a Node.js/Sharp/libvips build, this bug led to command execution. It covers the bug, the paths confirmed in applications so far, and...
USN-8891-1: librsvg vulnerability
It was discovered that librsvg incorrectly handled duplicate XML entity declarations while processing SVG documents containing nested XML inclusions. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
GHSA-WQ5F-XC86-PV6W sharp : Vulnerability in librsvg dependency CVE-2026-96889
Impact A memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditions apply, this vulnerability can lead to possible remote code execution RCE on glibc-based Linux. Patches Using prebuilt binaries provided by sharp? Most...
sharp : Vulnerability in librsvg dependency CVE-2026-96889
Impact A memory-related vulnerability has been discovered and fixed in the upstream librsvg dependency. When certain runtime-specific conditions apply, this vulnerability can lead to possible remote code execution RCE on glibc-based Linux. Patches Using prebuilt binaries provided by sharp? Most...
NPM: sharp : Vulnerability in librsvg dependency CVE-2026-96889
NPM: sharp : Vulnerability in librsvg dependency CVE-2026-96889 discovered by ? in WordPress Npm sharp versions 0.35.5...
Astra Linux ā Vulnerability in librsvg
A directory traversal vulnerability exists in the URL decoder of librsvg before version 2.56.3. This vulnerability could be exploited by local or remote attackers to access files located in the local filesystem, outside of the expected area. This was demonstrated with the URL...
ROOT-OS-DEBIAN-13-CVE-2026-96889 CVE-2026-96889 in librsvg - Patched by Root
Root has patched CVE-2026-96889 in the librsvg package for Root:Debian:13. Multiple fixed versions available...
Rocky Linux 8 [CIQ] Security Update: librsvg2 / librsvg2-debuginfo / librsvg2-debugsource / etc (crlsa-2020_4709)
The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20204709 advisory. librsvg: Resource exhaustion via crafted SVG file with nested patterns CVE-2019-20446 Tenable has extracted the preceding description block directly from the CIQ...
ROOT-OS-DEBIAN-12-CVE-2026-96889 CVE-2026-96889 in librsvg - Patched by Root
Root has patched CVE-2026-96889 in the librsvg package for Root:Debian:12. Multiple fixed versions available...
Exploit for CVE-2026-94545
CVE-2026-94545 Next.js next/og Unauthenticated RCE ā CVE-2026...
[SECURITY] Fedora 45 Update: rust-librsvg-2.63.2-1.fc45
A library to render SVG images to Cairo surfaces. GNOME uses this to render SVG icons. Outside of GNOME, other desktop environments use it for similar purposes. Wikimedia uses it for Wikipedia's SVG diagrams...
Fedora 45 : librsvg2 / rust-librsvg / rust-xml5ever (2026-1e23d80c94)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-1e23d80c94 advisory. Update librsvg to version 2.63.2. This includes a fix for a potential use-after-free bug assigned RUSTSEC-2026-0305, also assigned CVE-2026-96889 - see...
SUSE CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
Linux Distros Unpatched Vulnerability : CVE-2026-96889
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free err...
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
DEBIAN-CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
UBUNTU-CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
EUVD-2026-85608
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
CVE-2026-96889
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...