QuMagie vulnerabilities
CVEs whose affected-version data names the QuMagie package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-50612Critical· 9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie
An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fi…
CVE-2026-41545High· 8.6A relative path traversal vulnerability has been reported to affect QuMagie
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have a…
CVE-2025-62857Medium· 6.1A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in t…