Vulnerabilities in yuzutech

3 results

CVE-2025-14896HIGHdue to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker caEPSS 0.3%CVE-2026-102359HIGHKroki: TikZ Secure Mode Local File Read via LaTeX File I/O PrimitivesEPSS —CVE-2026-102356MEDIUMKroki Mermaid companion SSRF via flowchart image URLsEPSS —