CVE-2026-41247
1 advisory.
Packagist/studio-42/elfinder CVE-2026-41247: critical 9.8
elFinder: Command injection in resize background color parameter when using ImageMagick CLI
Action: Upgrade studio-42/elfinder to 2.1.67 or later.
composer require studio-42/elfinder:2.1.67Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.1.67 | - |
Fixed versions
| 2.1.67 |
Sources
- osv: GHSA-8q4h-8crm-5cvc
- https://github.com/Studio-42/elFinder/security/advisories/GHSA-8q4h-8crm-5cvc
- https://nvd.nist.gov/vuln/detail/CVE-2026-41247
- https://github.com/Studio-42/elFinder
CVE-2026-41247 · published · modified · JSON