CVE-2025-61514

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file...

CVE-2025-61514

SageMath, Inc CoCalc (specifically the @cocalc/frontend and @cocalc/hub components) is vulnerable to an arbitrary file upload flaw in versions prior to commit 0d2ff58 . The root cause is inadequate validation of specially crafted SVG files , which allows an attacker to achieve arbitrary code exec...