Vulnerabilidades en yuzutech

3 resultados

CVE-2026-102359HIGHKroki: TikZ Secure Mode Local File Read via LaTeX File I/O PrimitivesEPSS 0.4%CVE-2025-14896HIGHdue to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker caEPSS 0.3%CVE-2026-102356MEDIUMKroki Mermaid companion SSRF via flowchart image URLsEPSS 0.2%