Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
fnando records in CISA KEVNo fnando vulnerabilities are listed in CISA KEV.
Priority LOW 27
The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.00366 · Published 2026-09-14 · Fixed in 0.3.0 CWE-776
Open these records in search →