CVE-2026-82838

Vulnerability Description

The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set.

Related Weaknesses (CWE)

CWE-80

References

https://github.com/venueless/venueless/security/advisories/GHSA-38wh-hqvm-xgfc

FAQ

What is CVE-2026-82838?

CVE-2026-82838 is a documented vulnerability. The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set.

How severe is CVE-2026-82838?

CVSS scoring is not yet available for CVE-2026-82838. Check NVD for updates.

Is there a patch for CVE-2026-82838?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.