Inkscape vulnerabilities

CVEs whose affected-version data names the Inkscape package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-4980Medium· 6.3PoC

7mo ago

Improper Restriction of XML External Entity Reference in Inkscape

A local file disclosure vulnerability in the XInclude processing component of Inkscape 1.1 before 1.3 allows a remote attacker to read local files via a crafted SVG file containing malicious xi:include tags.

▾ TwilightInkscape · InkscapeEPSS 0.24%via CVEORG