Browse all 5 CVE security advisories affecting darylldoyle. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-107381 | svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences — svg-sanitizer CWE-178 | 6.5 | Medium | 2026-10-14 |
| CVE-2026-107380 | enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision — svg-sanitizer CWE-79 | 5.4 | Medium | 2026-10-08 |
| CVE-2026-107379 | enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash — svg-sanitizer CWE-770 | 6.5 | Medium | 2026-10-08 |
| CVE-2025-55166 | svg-sanitizer By-Passing Attribute Sanitization — svg-sanitizer CWE-79 | 6.1AI | Medium AI | 2025-08-12 |
| CVE-2022-23638 | Cross-site Scripting in svg-sanitizer — svg-sanitizer CWE-79 | 6.2 | Medium | 2022-02-14 |
This page lists every published CVE security advisory associated with darylldoyle. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.