Vulnerabilities

TI-2024-16571 CVE-2024-25117 · GHSA-f3qr-qr4x-j273

php-svg-lib lacks path validation on font through SVG inline styles

HIGH 76

php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00932 Published 2024-02-21 Fixed in 0.5.2 CWE-502

TI-2023-27480 CVE-2023-50252

MEDIUM 63

php-svg-lib is an SVG file parsing / rendering library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23903 Published 2023-12-12 Fixed in 0.5.1 CWE-15

TI-2023-27479 CVE-2023-50251 · GHSA-ff5x-7qg5-vwf2

HIGH 72

php-svg-lib is an SVG file parsing / rendering library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00878 Published 2023-12-12 Fixed in 0.5.1 CWE-674