Vulnerabilities

TI-2026-25815 CVE-2026-33418 · GHSA-7j2x-32w6-p43p

@dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment Injection

LOW 39

DiceBear is an avatar library for designers and developers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00382 Published 2026-03-24 Fixed in 9.4.2 CWE-185

TI-2026-25722 CVE-2026-33311 · GHSA-mr9r-mww3-v6gv

LOW 21

DiceBear is an avatar library for designers and developers.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00188 Published 2026-03-24 Fixed in 5.4.4, 6.1.4 +3 CWE-79

TI-2026-23253 CVE-2026-29112 · GHSA-v3r3-4qgc-vw66

LOW 39

DiceBear is an avatar library for designers and developers.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0036 Published 2026-03-18 Fixed in 9.4.0 CWE-770