Darylldoyle vulnerabilities

Products

• Svg-sanitizer 13

Newest

• darylldoyle svg-sanitizer svg-sanitizer before 1.1.0 XSS via animateTransform on Safari CVE-2026-121447 5.3 MediumNovember 3, 2026
• darylldoyle svg-sanitizer svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes CVE-2026-121446 5.3 MediumNovember 3, 2026
• darylldoyle svg-sanitizer svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping CVE-2026-121445 8.2 HighNovember 3, 2026
• darylldoyle svg-sanitizer svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph CVE-2026-121444 8.7 HighNovember 3, 2026
• darylldoyle svg-sanitizer svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag CVE-2026-121443 6.9 MediumNovember 3, 2026
• darylldoyle svg-sanitizer svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize() CVE-2026-117541 6.9 MediumOctober 27, 2026
• darylldoyle svg-sanitizer svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop CVE-2026-117540 8.7 HighOctober 27, 2026
• darylldoyle svg-sanitizer darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass CVE-2026-117539 5.1 MediumOctober 27, 2026
• darylldoyle svg-sanitizer svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences CVE-2026-107381 Fix available 6.5 MediumOctober 8, 2026
• darylldoyle svg-sanitizer enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision CVE-2026-107380 Fix available 5.4 MediumOctober 8, 2026
• darylldoyle svg-sanitizer enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash CVE-2026-107379 Fix available 6.5 MediumOctober 8, 2026
• darylldoyle svg-sanitizer svg-sanitizer By-Passing Attribute Sanitization CVE-2025-55166 Fix available 5.1 MediumAugust 12, 2025
• darylldoyle svg-sanitizer Cross-site Scripting in svg-sanitizer CVE-2022-23638 Fix available 6.2 MediumFebruary 14, 2022