All 5 CVE vulnerabilities found in svg-sanitizer, with AI-generated Chinese analysis, references, and POCs.
Vendor: darylldoyle
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-107381 | svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences CWE-178 | 6.5 | Medium | 2026-10-14 |
| CVE-2026-107380 | enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision CWE-79 | 5.4 | Medium | 2026-10-08 |
| CVE-2026-107379 | enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash CWE-770 | 6.5 | Medium | 2026-10-08 |
| CVE-2025-55166 | svg-sanitizer By-Passing Attribute Sanitization CWE-79 | 6.1AI | Medium AI | 2025-08-12 |
| CVE-2022-23638 | Cross-site Scripting in svg-sanitizer CWE-79 | 6.2 | Medium | 2022-02-14 |
All 5 known CVE vulnerabilities affecting svg-sanitizer with full Chinese analysis, references, and POCs where available.