VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Mar 27, 2026· Updated Jun 17, 2026

CVE-2026-4980

CVE-2026-4980

Description

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Inkscape/Inkscapev53 versions
    1.1+ 2 more
    • (no CPE)range: 1.1
    • (no CPE)range: <1.3
    • cpe:2.3:a:inkscape:inkscape:*:*:*:*:*:*:*:*range: >=1.1,<1.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.