CVE-2026-106111 | SixLabors ImageSharp up to 4.1.1 Exr Decompression ExrBaseDecompressor.UndoZipCompression information disclosure

October 6, 2026 Yanac

A vulnerability was found in SixLabors ImageSharp up to 4.1.1. It has been rated as problematic. This impacts the function ExrBaseDecompressor.UndoZipCompression of the component Exr Decompression. This manipulation causes information disclosure.

The identification of this vulnerability is CVE-2026-106111. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More