Vendors / Is-svg Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Is-svg Project records in CISA KEV No Is-svg Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 38
A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02629 · Published 2021-06-21 · Partial fix · 4.3.0 CWE-770
Priority LOW 37
The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS).
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02027 · Published 2021-03-12 · Partial fix · 4.2.2 CWE-1333
Open these records in search → All records by CVSS severity
0 2 0 0 0
