Threats affecting pkg:github/ImageMagick

CVE-2026-123273 is a high-severity infinite loop vulnerability in ImageMagick's SVG decoder affecting versions before 7.1.2-35 and 6.9.13-60. The flaw arises because the function QueueAuthenticPixelCacheNexus does not validate the requested pixel region's width and height, allowing crafted SVG images to cause a non-advancing pixel region request. This results in excessive CPU consumption and hangs the decoding process.