{"action":"Upgrade SixLabors.ImageSharp to 4.1.2 or later.","affected":[{"fixed":"4.1.2","introduced":"4.0.0"}],"component":"SixLabors.ImageSharp","cve_ids":["CVE-2026-106112"],"ecosystem":"NuGet","epss":0.00385,"exploited":false,"fixed_versions":["4.1.2"],"ghsa_id":"GHSA-ffp7-56pq-64mr","id":"tcs_01M5N8MJP3CTJ1873B07J2YFWZ","modified_at":"2026-10-07T20:30:06.058592993Z","published_at":"2026-10-07T20:24:37Z","references":["https://osv.dev/vulnerability/GHSA-ffp7-56pq-64mr","https://github.com/SixLabors/ImageSharp/security/advisories/GHSA-ffp7-56pq-64mr","https://nvd.nist.gov/vuln/detail/CVE-2026-106112","https://github.com/SixLabors/ImageSharp/pull/3187","https://github.com/SixLabors/ImageSharp/commit/b03f0ed7e5be760eecc740fa53dd166b18ae9b23","https://github.com/SixLabors/ImageSharp","https://github.com/SixLabors/ImageSharp/releases/tag/v4.1.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-ffp7-56pq-64mr","url":"https://osv.dev/vulnerability/GHSA-ffp7-56pq-64mr"}],"summary":"ImageSharp: ICC LUT16 output channel count can write beyond Vector4"}