VULNERABILITY INTELLIGENCE
CVE-2026-82838
EPSS probability0.40%
CISA KEVNot currently listed
Published2026-08-31
Last modified2026-09-03
Description
The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set.
Weakness classification
- 655498c3-6ec5-4f0b-aea6-853b334d05a6: CWE-80