Description
svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers to crash requests by submitting SVG input ending inside an unclosed tag. Attackers can upload truncated input like a single '<' to trigger an uncaught ValueError from strpos() in hasElementWithTooManyAttributes() or hasInternalDtdSubset() on PHP 8, failing the request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| darylldoyle | svg-sanitizer | 1.1.0 – < 1.1.1 | 1.1.1 |
References
- GitHub Security Advisory (GHSA-f7cw-vfxq-7ph2) vendor-advisory
- VulnCheck Advisory: svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag third-party-advisory