High DSA-3781-1 1 CVE

svgsalamander - security update

Published Feb 5, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	svgsalamander	0~svn95-1+deb8u1

Vulnerabilities 1

High 7.4

CVE-2017-5617

Server Side Request Forgery in svgSalamander

The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks via an xlink:href attribute in an SVG file.

com.kitfox.svg:svg-salamander svgsalamander svgsalamander Debian Ubuntu Maven

Mar 16, 2017