Dicebear vulnerabilities
Products
- Dicebear 4
Newest
- dicebear DiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials) 4.7 Medium
- dicebear @dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection 7.5 High
- dicebear @dicebear/core and @dicebear/initials Vulnerable to SVG Injection via Unsanitized Options 4.7 Medium
- dicebear @dicebear/converter vulnerable to ncontrolled memory allocation via crafted SVG dimensions 7.5 High