CVE-2020-8215: Automattic Canvas

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

A buffer overflow is present in canvas version <= 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image.

Affected products

• Automattic Canvas: up to and including 1.6.9

Published 2020-07-20. Last modified 2026-06-17.