Description
svg-sanitizer from 0.11.0 before 1.1.0 contains an uncaught exception vulnerability that allows attackers to crash callers by submitting well-formed XML without a top-level svg root. Attackers can supply documents with a non-svg root or nested svg element, causing Sanitizer::sanitize() to throw a LogicException instead of returning false, crashing workers or bypassing upload rejection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| darylldoyle | svg-sanitizer | 0.11.0 – < 1.1.0 | 1.1.0 |