Skip to content
OpenAdvisories

Vendor

Inkscape

5 known vulnerabilities.

Products

Inkscape 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-4980

    Improper Restriction of XML External Entity Reference in Inkscape

    A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

    Inkscape Inkscape inkscape inkscape Debian Ubuntu
  • Medium 4.8
    CVE-2025-15523

    TCC Bypass via Inherited Permissions in Bundled Interpreter in Inkscape.app

    MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary com…

    Inkscape Inkscape inkscape Ubuntu