Advisories · Technology
darylldoyle svg-sanitizer.
Every CVE that names darylldoyle svg-sanitizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
svg-sanitizer before 1.1.0 XSS via animateTransform on Safari
- darylldoyle svg-sanitizer
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes
- darylldoyle svg-sanitizer
- CWE-791
- CVSS 8.2 High
svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping
- darylldoyle svg-sanitizer
- CWE-754
- CVSS 8.7 High
svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph
- darylldoyle svg-sanitizer
- Denial of service
- CVSS 6.9 Medium
svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag
- darylldoyle svg-sanitizer
- CWE-248
- CVSS 6.9 Medium
svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()
- darylldoyle svg-sanitizer
- CWE-248
- CVSS 8.7 High
svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop
- darylldoyle svg-sanitizer
- Denial of service
- CVSS 5.1 Medium
darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass
- darylldoyle svg-sanitizer
- Cross-site scripting (XSS)