Description
svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop() and countUse() of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use elements, forcing exponential path enumeration that pins PHP workers for hours.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| darylldoyle | svg-sanitizer | 0.11.0 – < 1.1.0 | 1.1.0 |
References
- GitHub Security Advisory (GHSA-hrwm-vcc9-hcm4) vendor-advisory
- VulnCheck Advisory: svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph third-party-advisory