CVE-2026-129484 | Yuzutech Kroki up to 0.35.x /goat/svg svg-color-dark-scheme/svg-color-light-scheme cross site scripting (EUVD-2026-126081)

November 15, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Yuzutech Kroki up to 0.35.x. This affects an unknown function of the file /goat/svg. Such manipulation of the argument svg-color-dark-scheme/svg-color-light-scheme leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-129484. The attack can be launched remotely. No exploit exists.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More