node-svgo vulnerabilities (Debian)

4 vulnerabilities.

• node-svgo Debian SVGO: removeScripts allows executable links through namespace and control-character bypasses CVE-2026-84370 Fix available 8.2 HighSeptember 1, 2026
• node-svgo Debian SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements CVE-2026-84369 Fix available 6.1 MediumSeptember 1, 2026
• node-svgo Debian SVGO: removeScripts plugin leaves some executable scripts intact CVE-2026-73650 Fix available 8.2 HighJuly 21, 2026
• node-svgo Debian SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs) CVE-2026-29074 Fix available 7.5 HighMarch 4, 2026