All errata/c10f2/ALT-PU-2026-15890-2
ALT-PU-2026-15890-2

Package update inkscape in branch c10f2

Version1.2.2-alt3
Published2026-09-22
Max severityMEDIUM
Severity:

Closed issues (1)

CVE-2026-4980
MEDIUM6.3

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

Published: 2026-03-27Modified: 2026-10-26
CVSS 3.xMEDIUM 6.3
CVSS:3.x/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N