CVE-2025-61514

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file.

Published Oct 22, 2025

https://github.com/advisories/GHSA-g66q-rfrg-hp99

CVSS ScoreMedium

6.9

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-61514

An arbitrary file upload vulnerability in SageMath, Inc CoCalc before commit 0d2ff58 allows attackers to execute arbitrary code via uploading a crafted SVG file.

Published Oct 22, 2025

https://github.com/advisories/GHSA-g66q-rfrg-hp99

CVSS ScoreMedium

6.9


npm	@cocalc/frontend	1.0.0
npm	@cocalc/frontend	1.0.1
npm	@cocalc/frontend	1.0.2
npm	@cocalc/frontend	1.1.0
npm	@cocalc/frontend	1.10.0
npm	@cocalc/frontend	1.100.0
npm	@cocalc/frontend	1.101.0
npm	@cocalc/frontend	1.101.1
npm	@cocalc/frontend	1.101.2
npm	@cocalc/frontend	1.101.3
npm	@cocalc/frontend	1.101.4
npm	@cocalc/frontend	1.101.5
npm	@cocalc/frontend	1.102.0
npm	@cocalc/frontend	1.102.1
npm	@cocalc/frontend	1.102.2
npm	@cocalc/frontend	1.102.4
npm	@cocalc/frontend	1.102.5
npm	@cocalc/frontend	1.102.6
npm	@cocalc/frontend	1.102.7
npm	@cocalc/frontend	1.11.0
npm	@cocalc/frontend	1.12.1
npm	@cocalc/frontend	1.12.2
npm	@cocalc/frontend	1.13.0
npm	@cocalc/frontend	1.14.0
npm	@cocalc/frontend	1.15.0
npm	@cocalc/frontend	1.15.1
npm	@cocalc/frontend	1.16.0
npm	@cocalc/frontend	1.17.0
npm	@cocalc/frontend	1.17.1
npm	@cocalc/frontend	1.17.2
npm	@cocalc/frontend	1.17.3
npm	@cocalc/frontend	1.18.0
npm	@cocalc/frontend	1.18.1
npm	@cocalc/frontend	1.19.0
npm	@cocalc/frontend	1.2.0
npm	@cocalc/frontend	1.20.0
npm	@cocalc/frontend	1.21.0
npm	@cocalc/frontend	1.22.0
npm	@cocalc/frontend	1.23.0
npm	@cocalc/frontend	1.24.0
npm	@cocalc/frontend	1.25.0
npm	@cocalc/frontend	1.25.1
npm	@cocalc/frontend	1.26.0
npm	@cocalc/frontend	1.27.0
npm	@cocalc/frontend	1.27.1
npm	@cocalc/frontend	1.27.2
npm	@cocalc/frontend	1.27.3
npm	@cocalc/frontend	1.28.0
npm	@cocalc/frontend	1.29.0
npm	@cocalc/frontend	1.3.0

Ecosystem	Package	Version


npm	@cocalc/frontend	1.0.0
npm	@cocalc/frontend	1.0.1
npm	@cocalc/frontend	1.0.2
npm	@cocalc/frontend	1.1.0
npm	@cocalc/frontend	1.10.0
npm	@cocalc/frontend	1.100.0
npm	@cocalc/frontend	1.101.0
npm	@cocalc/frontend	1.101.1
npm	@cocalc/frontend	1.101.2
npm	@cocalc/frontend	1.101.3
npm	@cocalc/frontend	1.101.4
npm	@cocalc/frontend	1.101.5
npm	@cocalc/frontend	1.102.0
npm	@cocalc/frontend	1.102.1
npm	@cocalc/frontend	1.102.2
npm	@cocalc/frontend	1.102.4
npm	@cocalc/frontend	1.102.5
npm	@cocalc/frontend	1.102.6
npm	@cocalc/frontend	1.102.7
npm	@cocalc/frontend	1.11.0
npm	@cocalc/frontend	1.12.1
npm	@cocalc/frontend	1.12.2
npm	@cocalc/frontend	1.13.0
npm	@cocalc/frontend	1.14.0
npm	@cocalc/frontend	1.15.0
npm	@cocalc/frontend	1.15.1
npm	@cocalc/frontend	1.16.0
npm	@cocalc/frontend	1.17.0
npm	@cocalc/frontend	1.17.1
npm	@cocalc/frontend	1.17.2
npm	@cocalc/frontend	1.17.3
npm	@cocalc/frontend	1.18.0
npm	@cocalc/frontend	1.18.1
npm	@cocalc/frontend	1.19.0
npm	@cocalc/frontend	1.2.0
npm	@cocalc/frontend	1.20.0
npm	@cocalc/frontend	1.21.0
npm	@cocalc/frontend	1.22.0
npm	@cocalc/frontend	1.23.0
npm	@cocalc/frontend	1.24.0
npm	@cocalc/frontend	1.25.0
npm	@cocalc/frontend	1.25.1
npm	@cocalc/frontend	1.26.0
npm	@cocalc/frontend	1.27.0
npm	@cocalc/frontend	1.27.1
npm	@cocalc/frontend	1.27.2
npm	@cocalc/frontend	1.27.3
npm	@cocalc/frontend	1.28.0
npm	@cocalc/frontend	1.29.0
npm	@cocalc/frontend	1.3.0

Find vulnerabilities. Fix fast with AI.

CVE-2025-61514

CVE-2025-61514