Skip to content
OpenAdvisories

Package · npm

external-svg-loader

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.1
    CVE-2023-40013

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in external-svg-loader

    SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place. According to the docs, svg-loader will strip all JS code before injecting the SVG file for security reasons but the input sanitization logi…

    shubhamjain svg-loader external-svg-loader npm