@dicebear/converter vulnerabilities (npm)

2 vulnerabilities.

• @dicebear/converter npm @dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection CVE-2026-33418 Fix available 7.5 HighMarch 20, 2026
• @dicebear/converter npm @dicebear/converter vulnerable to ncontrolled memory allocation via crafted SVG dimensions CVE-2026-29112 Fix available 7.5 HighMarch 16, 2026