CVSS: 0 (multiple issues with various scores)
Affected versions: 22.0.0 - 30.9.0
Category: Security
Xperience by Kentico utilizes the Magick.NET (opens in a new tab) library (Magick.NET-Q8-AnyCPU package), which has recently been flagged for multiple vulnerabilities, ranging from Moderate to High severity.
As part of our ongoing commitment to platform security, we regularly and automatically update third-party dependencies without explicitly mentioning them in the changelog or security advisories.
This advisory is issued to provide transparency and reinforce confidence in our proactive approach to dependency management and platform security.
Accordingly, the Magick.NET-Q8-AnyCPU package was updated in the following ways:
Update to the latest Xperience by Kentico version. See Update Xperience by Kentico projects for detailed instructions. Optionally, you can temporarily add Magick.NET-Q8-AnyCPU version 14.8.1 as a direct package reference to your project.