Known Vulnerabilities for Avatar by Jenkins
Listed below are 1 of the newest known vulnerabilities associated with "Avatar" by "Jenkins".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-65650 json | Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload. | Not Provided | 2026-07-22 | 2026-07-22 |
| CVE-2026-58654 json | The Grav API plugin (getgrav/grav-plugin-api) 1.0.0 contains an unrestricted file upload vulnerability in the avatar upload e... | Not Provided | 2026-07-08 | 2026-07-08 |
| CVE-2026-57676 json | Authorization Bypass Through User-Controlled Key vulnerability in Matteo Manna Simple User Avatar allows Exploiting Incorrect... | Not Provided | 2026-06-29 | 2026-07-08 |
| CVE-2026-53962 json | Discourse is an open-source discussion platform. Prior to 2026.6.0, 2026.5.1, 2026.4.2, and 2026.1.5, insufficient SVG saniti... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-52891 json | Wekan is open source kanban built with Meteor. Prior to 9.07, Wekan avatar upload functionality embeds user-supplied filename... | Not Provided | 2026-07-15 | 2026-07-17 |
| CVE-2026-48062 json | CodeIgniter is a PHP full-stack web framework. Prior to 4.7.3, the ext_in upload validation rule in system/Validation/StrictR... | Not Provided | 2026-07-17 | 2026-07-20 |
| CVE-2026-42553 json | Cinny is a Matrix client. Prior to 4.10.3, A remote authenticated attacker who shares a room with a victim and has permission... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-42174 json | Kirby is an open-source content management system. Prior to versions 4.9.0 and 5.4.0, user avatar creation, replacement and d... | Not Provided | 2026-05-09 | 2026-05-11 |
| CVE-2026-21720 json | Every uncached /avatar/:hash request spawns a goroutine that refreshes the Gravatar image. If the refresh sits in the 10-slot... | Not Provided | 2026-01-27 | 2026-07-15 |
| CVE-2026-12137 json | The SysBasics Customize My Account for WooCommerce – Dashboard, Endpoints, Avatar & Menu Manager plugin for WordPress is vu... | Not Provided | 2026-06-18 | 2026-06-18 |