All vulnerabilities

Servers and applications

GHSA-528x-2384-jmxp

Policy Bypass possible through a delegate when an executable is blocked in the policy

Severity
Low 3.3
Published
10 Oct 2026
Last changed
10 Oct 2026
Added to UpHeron
3 Nov 2026
Fixed in
6.9.13-58, 7.1.2-33
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
ImageMagickServers and applications · github:imagemagick/imagemagick
  • Every version before 7.1.2-33
  • Every version before 6.9.13-58

References