fiora vulnerabilities (npm)

2 vulnerabilities.

• fiora npm Fiora chat group avatar is vulnerable to XSS via SVG files CVE-2025-56515 Public exploit 8.8 HighOctober 1, 2025
• fiora npm Fiora chat user avatar is vulnerable to XSS via SVG files CVE-2025-56514 Public exploit 5.4 MediumOctober 1, 2025