Threats affecting pkg:github/darylldoyle/svg-sanitizer

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	5.1	CVE-2026-117539darylldoyle svg-sanitizer · Cross-site Scripting Medium5.12026-10-27CVE Database V5CVE-2026-117539 CVE-2026-117539 is a cross-site scripting (XSS) vulnerability in darylldoyle svg-sanitizer versions before 1.0.0. The flaw allows attackers to embed external resources by uploading crafted SVG files that contain unsanitized style content, unquoted url() values, or image href attributes. This can lead to exfiltration of page data, user tracking, or disclosure of visitor IP addresses. Vulnerability	CVE Database V5	2026-10-27

Page 1 of 1 · 1 duplicate CVE record merged