Threats tagged 'ghsa-3r85-4hm6-r357'

svg-sanitizer versions from 0.5.0 up to but not including 1.1.0 have a vulnerability where attackers can bypass remote URL removal by using CSS escape sequences inside url() in SVG presentation attributes. This allows crafted SVG files with attributes like fill containing escaped slashes to cause browsers to resolve remote URLs, triggering external requests and potentially enabling data exfiltration.