All products

@dicebear/converter

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()CVE-2026-33418 · GHSA-7J2X-32W6-P43P @dicebear/converter npm High Fix reported
Uncontrolled memory allocation via crafted SVG dimensions in @dicebear/converterCVE-2026-29112 · GHSA-V3R3-4QGC-VW66 @dicebear/converter npm High Fix reported