SVGO v2.8.3 Patch: Namespace Handling Flaw in removeScriptElement

Vulnerability Overview Vulnerability Name: does not consider namespaces when processing tags. Fixer: @SethFalco Release Date: July 12, 2023 Version: v2.8.3 Affected Scope Affected Versions: SVGO v2 Note: SVGO v2 is no longer officially supported; upgrading to SVGO v4 is recommended. Although this fix has been backported to v2, more complex changes may not be performed in the future for this version. Remediation Fix Details: Fixed the issue where did not consider namespaces when processing tags. Upgrade Recommendation: Users are advised to upgrade to SVGO v4 and refer to the following migration guides: - Migration Guide from v2 to v3 - Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Additional Information Release Date: July 12, 2023 Repository: svg/svg Version: v2.8.3 Notes Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Links Compare v2.8.3 Contributor Information Contributor: SethFalco Asset Downloads Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Source Code: - Source code (zip) - Source code (tar.gz) Release Date Release Date: July 12, 2023 Repository Information Repository: svg/svg Version: v2.8.3 Security Tips Security Impact: This fix addresses a security issue; upgrading as soon as possible is recommended. Future Support: More complex changes may not be performed for the v2 version in the future. Migration Guides Migration Guide from v2 to v3 Migration Guide from v3 to v4 Contributors Contributor: SethFalco Assets Sou

Goal Reached Thanks to every supporter — we hit 100%!

SVGO v2.8.3 Patch: Namespace Handling Flaw in removeScriptElement

More from this source