Skip to content

Yuzutech Kroki vulnerabilities

yuzutech krokiKroki Mermaid companion SSRF via flowchart image URLsCVE-2026-1023565.0 MediumNovember 6, 2026
yuzutech krokiKroki: TikZ Secure Mode Local File Read via LaTeX File I/O PrimitivesCVE-2026-1023597.5 HighNovember 6, 2026
yuzutech krokidue to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and...CVE-2025-148968.7 HighDecember 18, 2025