Skip to content
OpenAdvisories

Vendor

mattkrick

1 known vulnerabilities.

Products

sanitize-svg 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2023-22461

    sanitize-svg Filter Bypass Allows Cross-Site Scripting (XSS)

    The `sanitize-svg` package, a small SVG sanitizer to prevent cross-site scripting attacks, uses a deny-list-pattern to sanitize SVGs to prevent XSS. In doing so, literal `<script>`-tags and on-event handlers were detected in versions prior to 0.4.0. As a resu…

    mattkrick sanitize-svg @mattkrick/sanitize-svg npm