Description
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | svg2png | <= 4.1.1 | — | GHSA-mpp5-2x55-49xw |
Medium · 6.1
CVE-2020-11887
EUVD-2022-0650GHSA-mpp5-2x55-49xw
XSS in svg2png (NPM package)
Published Apr 17, 2020 · Updated Aug 4, 2024 · Assigned by mitre