Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sindre Sorhus IS-SVG 安全漏洞
Vulnerability Description
Sindre Sorhus is-svg是 （Sindre Sorhus）开源的一个应用软件。提供检查字符串或缓冲区是否为SVG功能。 IS-SVG 存在安全漏洞，该漏洞源于当应用程序检查一个精心制作的无效SVG字符串时，就会出现正则表达式拒绝服务(ReDOS)。
CVSS Information
N/A
Vulnerability Type
N/A