Description
SVG Formatter module provides support for using SVG images on your website.
Our dependency library enshrined/svg-sanitize has a cross-site scripting vulnerability.
This vulnerability is mitigated by the fact that an attacker must have a role with permission that enables them to upload SVG images.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | drupal/svg_formatter | < 1.17.0 · >= 2.0.0, <= 2.0.0 | 1.17.0 | DRUPAL-CONTRIB-2022-028 |