Skip to content
OpenAdvisories

Package · npm

convert-svg-core

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-24278

    Directory Traversal

    The package convert-svg-core before 0.6.4 are vulnerable to Directory Traversal due to improper sanitization of SVG tags. Exploiting this vulnerability is possible by using a specially crafted SVG file.

    convert-svg-core npm
  • High 7.5
    CVE-2022-24429

    Arbitrary Code Injection

    The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file.

    convert-svg-core npm
  • High 7.5
    CVE-2021-23631

    Directory Traversal

    This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the f…

    convert-svg-core convert-svg-to-png convert-svg-to-jpeg npm