Skip to content
OpenAdvisories

Package · npm

react-svg

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-8xqr-4cpm-wx7g

    Cross-Site Scripting in react-svg

    Versions of `react-svg` before 2.2.18 are vulnerable to cross-site scripting (xss). This is due to the fact that scripts found in SVG files are run by default. ## Recommendation Update to version 2.2.18 or later.

    react-svg npm