Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
|
|
svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences | Medium Risk 6.5 | 4 hours ago | 4 hours ago |
|
|
enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash | Medium Risk 6.5 | 4 hours ago | 4 hours ago |
|
|
enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision | Medium Risk 5.4 | 4 hours ago | 4 hours ago |
|
|
Sanitizer bypass in svg-sanitizer | Medium Risk 6.1 | 6 years ago | 28 days ago |
|
|
svg-sanitizer Bypasses Attribute Sanitization | Medium Risk 6.0 | 1 year ago | 1 year ago |
|
|
Cross-site Scripting in enshrined/svg-sanitize | Medium Risk 6.2 | 4 years ago | 2 years ago |
|
|
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes | High Risk 7.5 | 6 years ago | 2 years ago |
Page 1