GHSA-HC76-7MPC-QJQH: ImageMagick: Code injection in HTML…

Skip to content

Description

An incomplete fix of CVE-2026-25797 can result in code injection in the HTML encoder.

Description source: GitHub Advisory

Affected products and versions

Showing 12 of 17

Product	Source	Version range	Status
Magick.NET-Q16-AnyCPU Browse NuGet / Magick.NET-Q16-AnyCPU	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-HDRI-AnyCPU Browse NuGet / Magick.NET-Q16-HDRI-AnyCPU	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-HDRI-OpenMP-arm64 Browse NuGet / Magick.NET-Q16-HDRI-OpenMP-arm64	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-HDRI-arm64 Browse NuGet / Magick.NET-Q16-HDRI-arm64	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-HDRI-x64 Browse NuGet / Magick.NET-Q16-HDRI-x64	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-HDRI-x86 Browse NuGet / Magick.NET-Q16-HDRI-x86	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-OpenMP-arm64 Browse NuGet / Magick.NET-Q16-OpenMP-arm64	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-OpenMP-x64 Browse NuGet / Magick.NET-Q16-OpenMP-x64	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-arm64 Browse NuGet / Magick.NET-Q16-arm64	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-x64 Browse NuGet / Magick.NET-Q16-x64	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q16-x86 Browse NuGet / Magick.NET-Q16-x86	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected
Magick.NET-Q8-AnyCPU Browse NuGet / Magick.NET-Q8-AnyCPU	GitHub Advisory	Before 14.10.3 · Fixed in 14.10.3	affected

References

3

github.com

https://github.com/ImageMagick/ImageMagick

github.com

https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hc76-7mpc-qjqh

github.com

https://github.com/dlemstra/Magick.NET/releases/tag/14.10.3