BIT-GHOST-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

PT-2026-111341

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

[SECURITY] [DSA 6552-1] vips security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6552-1 [email protected] https://www.debian.org/security/ Tianyu Chen October 11, 2026 https://www.debian.org/security/faq -...

Remote Code Execution(RCE)

Ghost is vulnerable to a remote code execution. The vulnerability is due to improper handling of attacker-controlled SVG content in the bundled image processing library, which allows an attacker to create a malicious bookmark card through a website they control and execute arbitrary commands on t...

Arbitrary Code Injection

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Arbitrary Code Injection via a vulnerability in the SVG handling of an image processing library bundled with Ghost. When a staff user including a Contributor creates a bookmark card pointing to an...

EUVD-2026-92621

Ghost: Remote Code Execution via Bookmark Card Images...

CVE-2026-105642

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

CVE-2026-105642: Improper Control of Generation of Code

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

PT-2026-106138

Name of the Vulnerable Software and Affected Versions Ghost versions 6.56.0 through 6.66.0 Description A vulnerability exists in the SVG handling of an image processing library bundled with the Ghost content management system. A staff user with Contributor permissions or higher can create a...

RLSA-2026:62425 Important: gegl security update

GEGL Generic Graphics Library is a graph-based image processing framework. Security Fixes: gimp: gegl: GIMP: Remote code execution via integer overflow in HDR file parsing CVE-2026-18300 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other...

Gimp PCX Format DoS

The vulnerability of the PCX format file loading module in the Gimp image processing library is related to a single-shift error. Exploiting this vulnerability could allow an attacker to cause a system failure...

Gimp Image Processing Library Unauthenticated Access DoS

The vulnerability of the loadxwdf2d1b1 and loadxwdf1d24b1 functions in the Gimp image processing library is related to reading values outside of the permitted range in memory. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information or cause service...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read in the BGR decoder due to missing end-of-file checks. An attacker can access sensitive information from adjacent memory by submitting a specially crafted image file. Remediation Upgrade imagemagick to version 7.1.2.35...

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q16-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

Missing Release of Memory after Effective Lifetime

Overview Magick.NET-Q8-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Integer Overflow or Wraparound

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Integer Overflow or Wraparound

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Incorrect Authorization

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...