Threats affecting pkg:github/gosub-io/gosub-engine

A vulnerability in the Gosub browser engine (gosub-engine) through version 0.1.0 and main before commit 46868b3 allows a remote attacker to cause a Denial of Service (DoS) via uncontrolled recursion. This occurs when rendering an SVG document with excessively deep nested elements, leading to stack exhaustion and application crash. The malicious SVG can be embedded in an IMG element's SRC attribute, requiring only that the victim visits a crafted web page.