CVE-2026-32940 SiYuan has a SanitizeSVG bypass via data:text/xml in getDynamicIcon (incomplete fix for CVE-2026-29183)

SiYuan is a personal knowledge management system. In versions 3.6.0 and below, SanitizeSVG has an incomplete blocklist — it blocks data:text/html and data:image/svg+xml in href attributes but misses data:text/xml and data:application/xml, both of which can render SVG with JavaScript execution. Th...

PT-2026-26600

Greenshot is an open source Windows screenshot utility. Versions 1.3.312 and below have untrusted executable search path / binary hijacking vulnerability that allows a local attacker to execute arbitrary code when the affected Windows application launches explorer.exe without using an absolute...

gimp: GIMP: Remote Code Execution via ICO File Parsing Vulnerability

A flaw was found in GIMP. This vulnerability, a heap-based buffer overflow, occurs during the parsing of ICO files. A remote attacker can exploit this by convincing a user to open a malicious file or visit a malicious web page, leading to arbitrary code execution. The issue is due to a lack of...

ALSA-2026:5113 Important: gimp:2.8 security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: GIMP:...

Amazon Linux 2 : gimp, --advisory ALAS2GIMP-2026-012 (ALASGIMP-2026-012)

The version of gimp installed on the remote host is prior to 2.8.22-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2GIMP-2026-012 advisory. GIMP ICO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote...

Malicious code in connect-me-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2200373fc2d8be2f2480c4fb8d8040179d80499985ae5d0fa4db3b4117886816 The package connect-me-icon was found to contain malicious code...

MAL-2026-1698 Malicious code in connect-me-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2200373fc2d8be2f2480c4fb8d8040179d80499985ae5d0fa4db3b4117886816 The package connect-me-icon was found to contain malicious code...

EUVD-2025-208823

beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, which will be rendered/executed when visiting preview page. However due to beefree's Content Security Policy not all...

MAL-2026-1611 Malicious code in @emerald-react/icon-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17ff250c076101691329fe30e2efab7630e3563d3c0e6423a94d0eeec60d3dc The package @emerald-react/icon-button was found to contain malicious code...

Malicious code in @emerald-react/icon-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a17ff250c076101691329fe30e2efab7630e3563d3c0e6423a94d0eeec60d3dc The package @emerald-react/icon-button was found to contain malicious code...

Malicious code in @emerald-react/icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a73cc0869fbd6a9f90687210caf69cb8e9ee872202bc342c24c07ead3399b0 The package @emerald-react/icon was found to contain malicious code...

MAL-2026-1610 Malicious code in @emerald-react/icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f4a73cc0869fbd6a9f90687210caf69cb8e9ee872202bc342c24c07ead3399b0 The package @emerald-react/icon was found to contain malicious code...

Malicious code in @emerald-react/ellis-ai-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cc2912faed5d106a0ddadbdbbcc43656de34c400196cc7ef72bb0a8bd76969 The package @emerald-react/ellis-ai-icon was found to contain malicious code...

MAL-2026-1609 Malicious code in @emerald-react/ellis-ai-icon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01cc2912faed5d106a0ddadbdbbcc43656de34c400196cc7ef72bb0a8bd76969 The package @emerald-react/ellis-ai-icon was found to contain malicious code...

CVE-2025-12518

beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, which will be rendered/executed when visiting preview page. However due to beefree's Content Security Policy not all...

CVE-2025-12518 Stored XSS in beefree.io

beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, which will be rendered/executed when visiting preview page. However due to beefree's Content Security Policy not all...

CVE-2025-12518

beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, which will be rendered/executed when visiting preview page. However due to beefree's Content Security Policy not all...

CVE-2025-12518 Stored XSS in beefree.io

beefree.io SDK is vulnerable to Stored XSS in Social Media icon URL parameter in email builder functionality. Malicious attacker can inject arbitrary HTML and JS into template, which will be rendered/executed when visiting preview page. However due to beefree's Content Security Policy not all...

CVE-2025-12518

CVE-2025-12518 : The beefree.io SDK is affected by a Stored XSS in the Social Media icon URL parameter used by the email builder. An attacker could inject arbitrary HTML/JavaScript into a template, which is rendered/executed when a preview page is opened. The issue is mitigated by Beefree's Conte...

CVE-2026-27522

OpenClaw versions prior to 2026.2.24 contain a local media root bypass vulnerability in sendAttachment and setGroupIcon message actions when sandboxRoot is unset. Attackers can hydrate media from local absolute paths to read arbitrary host files accessible by the runtime user...