Threats tagged 'ghsa-6vrh-w6p3-v6fh'

A stored cross-site scripting (XSS) vulnerability exists in fastschema through version 0.15.1. This flaw allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check. The vulnerability can lead to partial compromise of confidentiality and integrity but does not affect availability.