enshrined/svg-sanitize
Composer · بسته
اطلاعرسانی آسیبپذیری
دنبالکردن| گزارش | محصول | اکوسیستم | شدت | وضعیت اصلاح | آخرین تغییر |
|---|---|---|---|---|---|
| svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences | enshrined/svg-sanitize | Composer | متوسط | اصلاح گزارش شده | |
| enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash | enshrined/svg-sanitize | Composer | متوسط | اصلاح گزارش شده | |
| enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision | enshrined/svg-sanitize | Composer | متوسط | اصلاح گزارش شده | |
| svg-sanitizer Bypasses Attribute Sanitization | enshrined/svg-sanitize | Composer | متوسط | اصلاح گزارش شده | |
| Cross-site Scripting in enshrined/svg-sanitize | enshrined/svg-sanitizesvg-support | ComposerWordPress | متوسط | اصلاح گزارش شده | |
| XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes | enshrined/svg-sanitize | Composer | زیاد | اصلاح گزارش شده | |
| Sanitizer bypass in svg-sanitizer | enshrined/svg-sanitize | Composer | متوسط | اصلاح گزارش شده |