CVE-2026-22600 | opf openproject up to 16.6.3 SVG File information disclosure (GHSA-m8f2-cwpq-vvhh)

January 10, 2026 Yanac

A vulnerability labeled as problematic has been found in opf openproject up to 16.6.3. This vulnerability affects unknown code of the component SVG File Handler. Executing a manipulation can lead to information disclosure.

This vulnerability is registered as CVE-2026-22600. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More