Vulnerabilities

TI-2021-09948 CVE-2021-29059 · GHSA-r8j5-h5cx-65gg

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular…

LOW 38

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02629 Published 2021-06-21 Partial fix · 4.3.0 CWE-770

TI-2021-09337 CVE-2021-28092 · GHSA-7r28-3m3f-r2pr

The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is…

LOW 37

The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02027 Published 2021-03-12 Partial fix · 4.2.2 CWE-1333

Vulnerabilities

Filters

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular…

The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is…