All products

@dicebear/initials

npm · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)CVE-2026-68921 · GHSA-GCR2-9V8M-GQ45 @dicebear/core@dicebear/initials npm Medium Fix reported
SVG Injection via Unsanitized Options in @dicebear/core and @dicebear/initialsCVE-2026-33311 · GHSA-MR9R-MWW3-V6GV @dicebear/core@dicebear/initials npm Medium Fix reported