CVE-2026-65650

Description

Elgg before 7.0.0 does not check image dimensions to prevent denial of service via a large avatar upload.

CVSS Vector

References

• https://github.com/Elgg/Elgg/commit/ab91d59dc2caaa3fdbfe7e9b916fc0cc7e6b323a
• https://github.com/Elgg/Elgg/compare/7.0.0-rc.1...7.0.0
• https://github.com/Elgg/Elgg/pull/15041