CVE-2026-35111

HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy CORP header was missing or insecure, allowing application resources to be loaded by other origins. This may expose resources to cross-origin data leakage, potentially resulting in unintended behavior or security impact...

EUVD-2026-118246

HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy CORP header was missing or insecure, allowing application resources to be loaded by other origins. This may expose resources to cross-origin data leakage, potentially resulting in unintended behavior or security impact...

CVE-2026-35111

HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy (CORP) header is either missing or insecure. This flaw allows application resources to be loaded by external origins, which may lead to cross-origin data leakage and unintended security impacts. While the technical det...

CVE-2026-35111 HCL AION is affected by multiple security vulnerabilities.

HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy CORP header was missing or insecure, allowing application resources to be loaded by other origins. This may expose resources to cross-origin data leakage, potentially resulting in unintended behavior or security impact...

CVE-2026-35111: HCL Software HCL AION: HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy (CORP) header was missing or insecure,…

HCL AION is affected by a vulnerability where the Cross-Origin-Resource-Policy CORP header was missing or insecure, allowing application resources to be loaded by other origins. This may expose resources to cross-origin data leakage, potentially resulting in unintended behavior or security impact...

Astra Linux – vulnerability in Imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder, it was possible to bypass the list-length resource policy when decoding a PSD image. Other security restrictions woul...

CLSA-2026-1790949439 Fix CVE(s): CVE-2026-93586, CVE-2026-93587, CVE-2026-93588

SECURITY UPDATE: use-after-free in ImagesToBlob when writing a multi-image list to an in-memory blob - debian/patches/CVE-2026-93586.patch: add SyncBlobStream and call it after WriteImage/WriteImages so the owner image and image info track the live blob buffer, in magick/blob.c,...

CVE-2026-93590

A flaw was found in ImageMagick's UHDR encoder. This vulnerability allows a remote attacker to bypass resource policies by processing specially crafted UHDR images. The flaw occurs because the encoder fails to perform necessary policy checks during buffer allocation for image pixels, potentially...

CVE-2026-82746 Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records

Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.updatemany/4. Ash.updatemany/4 runs as a single atomic statement a data-layer updatemany, for example a SQL MERGE whenever an atomic strategy is...

CVE-2026-82746 Ash.update_many/4 atomic path skips resource policy authorization, allowing updates to forbidden records

Missing Authorization vulnerability in ash-project ash allows an actor to update records forbidden by resource policies through the atomic path of Ash.updatemany/4. Ash.updatemany/4 runs as a single atomic statement a data-layer updatemany, for example a SQL MERGE whenever an atomic strategy is...

PT-2026-76047

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible to bypass the list-length resource policy when decoding a PSD image. Other security limits would...

CLSA-2026-1783416267 ImageMagick: Fix of 11 CVEs

CVE-2026-33901: fix heap buffer overflow out-of-bounds write in the MVG decoder when copying an over-long token into a fixed-size buffer - CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree by imposing a recursion depth limit on deeply nested XML - CVE-2026-45031: fix...

CLSA-2026-1783416614 ImageMagick: Fix of 12 CVEs

CVE-2026-33901: fix heap buffer overflow out-of-bounds write in the MVG decoder when copying an over-long token into a fixed-size buffer - CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree by imposing a recursion depth limit on deeply nested XML - CVE-2026-45031: fix...

CLSA-2026-1783415795 ImageMagick: Fix of 12 CVEs

CVE-2026-33901: fix heap buffer overflow out-of-bounds write in the MVG decoder when copying an over-long token into a fixed-size buffer - CVE-2026-33908: fix stack exhaustion denial of service in DestroyXMLTree by imposing a recursion depth limit on deeply nested XML - CVE-2026-45031: fix...

ImageMagick: ImageMagick: Denial of Service due to resource policy bypass in PSD decoder

A flaw was found in ImageMagick. A missing check in the PSD Photoshop Document decoder allows an attacker to bypass the list-length resource policy when processing a specially crafted PSD image. This could lead to a denial of service DoS condition by consuming excessive resources...

SUSE CVE-2026-45031

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible to bypass the list-length resource policy when decoding a PSD image. Other security limits would...

ALPINE-CVE-2026-45031

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible to bypass the list-length resource policy when decoding a PSD image. Other security limits would...

CVE-2026-45031

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible to bypass the list-length resource policy when decoding a PSD image. Other security limits would...

CVE-2026-45031: Uncontrolled Resource Consumption

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-47 and 7.1.2-22, due to a missing check in the PSD decoder it would be possible to bypass the list-length resource policy when decoding a PSD image. Other security limits would...

ImageMagick resource management error vulnerability

ImageMagick is a set of open-source image processing software developed by the ImageMagick project. It can read, convert, and write images in various formats. Versions of ImageMagick prior to 6.9.13-47 and 7.1.2-22 contained a resource management vulnerability. This vulnerability stemmed from a...