search
GhostScript
Trends
- 1Discourse Image Pipeline Exploit Enables File Read▼Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read
Security researchers have disclosed an exploit chain against Discourse's image processing pipeline that chains a JPEG race condition with vulnerabilities in GhostScript and ImageMagick to achieve arbitrary file reads on the server. The chained flaws show how widely used open-source image libraries can be combined into a single attack path, prompting concern among administrators running the forum software.
- 2ImageMagick Windows flaw lets malicious Ghostscript binary execute●CVE-2026-108693 is an uncontrolled search path flaw in ImageMagick on Windows. A malicious Ghostscript binary planted in
CVE-2026-108693 is an uncontrolled search path vulnerability in ImageMagick on Windows. A malicious Ghostscript binary planted in the working directory can execute with ImageMagick's privileges when PDF, PostScript, or EPS files are converted. Versions through 7.1.2-33 and 6.9.13-58 are affected, and users are being urged to update to a patched release.