CVE-2026-65650

Impact

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

Affected products

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/Elgg/Elgg/commit/ab91d59dc2caaa3fdbfe7e9b916fc0cc7e6b323a
• https://github.com/Elgg/Elgg/compare/7.0.0-rc.1...7.0.0
• https://github.com/Elgg/Elgg/pull/15041