Junglewise Threat Intelligence
ImageMagick: Code injection in HTML encoder due to incomplete fix of
Severity: low · CVSS 3.1 · Published 2026-07-24
Technologies: Magick.NET-Q16-OpenMP-arm64 (NuGet), Magick.NET-Q16-AnyCPU (NuGet), Magick.NET-Q16-HDRI-AnyCPU (NuGet), Magick.NET-Q8-x86 (NuGet), Magick.NET-Q8-AnyCPU (NuGet), Magick.NET-Q16-arm64 (NuGet), Magick.NET-Q16-OpenMP-x64 (NuGet), Magick.NET-Q16-HDRI-arm64 (NuGet), Magick.NET-Q16-HDRI-x86 (NuGet), Magick.NET-Q16-HDRI-x64 (NuGet), Magick.NET-Q8-OpenMP-arm64 (NuGet), Magick.NET-Q8-OpenMP-x64 (NuGet), Magick.NET-Q16-x64 (NuGet), Magick.NET-Q8-arm64 (NuGet), Magick.NET-Q8-x64 (NuGet), Magick.NET-Q16-x86 (NuGet), Magick.NET-Q16-HDRI-OpenMP-arm64 (NuGet). Vendors: NuGet.
Executive brief
ImageMagick: Code injection in HTML encoder due to incomplete fix of CVE-2026-25797
Affected products
- NuGet Magick.NET-Q16-OpenMP-arm64
- NuGet Magick.NET-Q16-AnyCPU
- NuGet Magick.NET-Q16-HDRI-AnyCPU
- NuGet Magick.NET-Q8-x86
- NuGet Magick.NET-Q8-AnyCPU
- NuGet Magick.NET-Q16-arm64
- NuGet Magick.NET-Q16-OpenMP-x64
- NuGet Magick.NET-Q16-HDRI-arm64
- NuGet Magick.NET-Q16-HDRI-x86
- NuGet Magick.NET-Q16-HDRI-x64
- NuGet Magick.NET-Q8-OpenMP-arm64
- NuGet Magick.NET-Q8-OpenMP-x64
- NuGet Magick.NET-Q16-x64
- NuGet Magick.NET-Q8-arm64
- NuGet Magick.NET-Q8-x64
- NuGet Magick.NET-Q16-x86
- NuGet Magick.NET-Q16-HDRI-OpenMP-arm64