Skip to content
OpenAdvisories

Package · npm

convert-svg-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2022-25759 EPSS 12%

    Remote Code Injection

    The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.

    convert-svg-core npm