CVE-2026-102359

Vendor

Yuzutech

Product

kroki

CVSS v3.1

7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness

CWE-22

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 30
   CVE NVD 5h ago

   Kroki creates diagrams from textual descriptions.

   Kroki creates diagrams from textual descriptions. Prior to 0.31.2, the TikZ backend's tikz/tikz2svg guard used when KROKI_SAFE_MODE is enabled blocks only \verbatiminput while allowing native TeX file-read primitives including…

   CVSS 7.5 Fix available CVE-2026-102359 Yuzutech