Netlify Image CDN

Mentions · 7d2
Mentions · 30d2
All mentions2
First seenOct 28, 2026
Last mentioned1d ago

Timeline

2 articles · newest first

Cloudflare Image Transformations chain bypasses CSP for XSS

Researchers combined an SVG sanitizer bug, Chromium cache behavior, and redirects; no CVE or wild exploitation is confirmed.

GBHackersOct 29, 06:18 UTC · 1d agoResearch 2 sources

Researchers chain Cloudflare image flaws into a CSP-bypass XSS

A public write-up shows script execution via /cdn-cgi/image/ using an SVG namespace bug and a Chromium cache quirk.

Cyber Security Newsupdated Oct 29, 06:18 UTC · 1d agofirst Oct 28, 15:38 UTC · 2d agoVulnerability 2 sources2 · 1 read

Appears with

Cloudflarevendor · 2
svg-hushproduct · 1
Google Cloud Storageproduct · 1
Cloudflare Image Transformationsproduct · 1
Image Transformationsproduct · 1
Googlevendor · 1
Cloudflarevictim · 1
Searchlight Cyberorganization · 1
Amazonvendor · 1
Netlifyvendor · 1
Amazon S3product · 1

Entities are extracted by the model from each article. First seen Oct 28, 2026, last mentioned 1d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.