sail vulnerabilities
CVEs whose affected-version data names the sail package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-59959Medium· 4.8SAIL: WebP decoder division by zero through malformed animated canvas metadata
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to version 1.0.2, the built-in WebP decoder can crash during loader initialization when processing a malformed a…
CVE-2026-54692High· 7.8PoCSAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. Prior to 1.0.0, sail_codec_load_frame_v8_xbm() in src/sail-codecs/xbm/xbm.c allocates the decoded pixel buffer using t…
CVE-2026-54627Critical· 9.8PoCSAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, psd_private_sail_pixel_format() in src/sail-codecs/psd/helpers.c resolves a one-channel PSD in …
CVE-2026-54626Critical· 9.8PoCSAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles
SAIL is a cross-platform library for loading and saving images with support for animation, metadata, and ICC profiles. In 0.9.10 and earlier, the TGA_INDEXED_RLE path selected by image_type == 9 allocates an image buffer using the one-by…