{"action":"Upgrade Magick.NET-Q8-x64 to 14.10.3 or later.","affected":[{"fixed":"14.10.3","introduced":"0"}],"component":"Magick.NET-Q8-x64","cve_ids":["CVE-2026-56379"],"ecosystem":"NuGet","exploited":false,"fixed_versions":["14.10.3"],"ghsa_id":"GHSA-xpg8-7m6m-jf56","id":"tcs_01M5N95NECYF65AHDWF77VTJC3","modified_at":"2026-09-24T20:15:11.619336121Z","published_at":"2026-02-25T19:12:48Z","references":["https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56","https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-xpg8-7m6m-jf56","https://nvd.nist.gov/vuln/detail/CVE-2026-56379","https://github.com/ImageMagick/ImageMagick/commit/9db96365ecab5de69cdec81b9359672b3a827aaa","https://github.com/ImageMagick/ImageMagick/commit/f63c78b3828933f1cc7cf499390248981af765aa","https://access.redhat.com/errata/RHSA-2026:32961","https://access.redhat.com/security/cve/CVE-2026-56379","https://bugzilla.redhat.com/show_bug.cgi?id=2491700","https://github.com/ImageMagick/ImageMagick","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-56379.json","https://www.vulncheck.com/advisories/imagemagick-command-injection-via-svg-decoder"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-xpg8-7m6m-jf56#NuGet/Magick.NET-Q8-x64","url":"https://osv.dev/vulnerability/GHSA-xpg8-7m6m-jf56"}],"summary":"ImageMagick: SVG-to-MVG Command Injection via coders/svg.c"}