Cloudflare Image Transformations chain bypasses CSP for XSS
Researchers combined an SVG sanitizer bug, Chromium cache behavior, and redirects; no CVE or wild exploitation is confirmed.
58
Product
Image Transformations
- Mentions · 7d1
- Mentions · 30d1
- All mentions1
- First seenOct 29, 2026
- Last mentioned1d ago
Timeline
1 articles · newest firstAppears with
- Cloudflarevictim · 1
- Netlify Image CDNproduct · 1
- Cloudflarevendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.