enshrined/svg-sanitize vulnerabilities (Packagist)
7 vulnerabilities.
enshrined/svg-sanitizePackagistsvg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences6.5 Mediumenshrined/svg-sanitizePackagistenshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision5.4 Mediumenshrined/svg-sanitizePackagistenshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash6.5 Mediumenshrined/svg-sanitizePackagistsvg-sanitizer By-Passing Attribute Sanitization5.1 Mediumenshrined/svg-sanitizePackagistCross-site Scripting in svg-sanitizer6.2 Mediumenshrined/svg-sanitizePackagistSanitizer bypass in svg-sanitizer6.1 Mediumenshrined/svg-sanitizePackagistXSS in enshrined/svg-sanitize due to mishandled script and data values in attributes7.5 High