VULNERABILITY INTELLIGENCE

CVE-2025-61514

CVSS score6.5 MEDIUM

EPSS probability0.41%

CISA KEVNot currently listed

Published2025-10-16

Last modified2026-06-17

Description

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file.