Sanitize-svg Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Sanitize-svg Project records in CISA KEV

No Sanitize-svg Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2023-08710 CVE-2023-22461 · GHSA-h857-2g56-468g

HIGH 66

The `sanitize-svg` package, a small SVG sanitizer to prevent cross-site scripting attacks, uses a deny-list-pattern to sanitize SVGs to prevent XSS.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0061 Published 2023-01-04 Fixed in 0.4, 0.4.0 CWE-79