GD vulnerabilities

1 known vulnerability in GD from Rurban. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  GD: External Control of File Name or Path

  CVE-2026-11526Jun 14, 2026RurbanEPSS 1.35%

  GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle. GD::Image::_make_filehandle opens a filename argument with Perl's 2-arg open(), so a filename that begins or ends with