CVE-2026-82838 — Default webserver configuration with incorrect CSP
The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Securit…
Published: 2026-08-31 · CVSS: 6.4 · CVSS 4.0
The default docker image shipped for Venueless did not properly ensure that uploaded SVG files could not be delivered with executable JavaScript content. A valid Content Security Policy is now set.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7