enshrined/svg-sanitize
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences | enshrined/svg-sanitize | Composer | Medium | Fix reported | |
| enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash | enshrined/svg-sanitize | Composer | Medium | Fix reported | |
| enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision | enshrined/svg-sanitize | Composer | Medium | Fix reported | |
| svg-sanitizer Bypasses Attribute Sanitization | enshrined/svg-sanitize | Composer | Medium | Fix reported | |
| Cross-site Scripting in enshrined/svg-sanitize | enshrined/svg-sanitizesvg-support | ComposerWordPress | Medium | Fix reported | |
| XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes | enshrined/svg-sanitize | Composer | High | Fix reported | |
| Sanitizer bypass in svg-sanitizer | enshrined/svg-sanitize | Composer | Medium | Fix reported |