Satori versions from 0.0.27 up to but not including 0.33.5 improperly escape certain values in generated SVG output, allowing crafted input to be interpreted as SVG markup. This vulnerability can lead to unintended SVG rendering depending on how the SVG is consumed. A fix is available in version 0.33.5. No complete workaround exists other than upgrading; applications that cannot upgrade immediately should avoid rendering attacker-controlled content with Satori.