Description
svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by placing javascript: URLs in the animateTransform values attribute. Attackers can upload crafted SVG files whose animateTransform targets the href attribute, executing arbitrary JavaScript when Safari users click the link.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| darylldoyle | svg-sanitizer | < 1.1.0 | 1.1.0 |
References
- GitHub Security Advisory (GHSA-q546-85r6-f39q) vendor-advisory
- VulnCheck Advisory: svg-sanitizer before 1.1.0 XSS via animateTransform on Safari third-party-advisory