2 matches found
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the System.Drawing.Common function. Remediation Upgrade Akka to version 1.5.0-alpha3, 1.4.46 or higher. References - GitHub Issue...
Remote Code Execution (RCE)
Overview Affected versions of this package are vulnerable to Remote Code Execution RCE when parsing certain types of graphics files. Note: This vulnerability only impacts systems running non-Windows. Remediation Upgrade System.Drawing.Common to version 4.7.2, 5.0.3 or higher. References - GitHub...