Vulnerabilities

TI-2026-57981 CVE-2026-84370 · GHSA-w27v-7q3p-w38r

SVGO: removeScripts allows executable links through namespace and control-character bypasses

LOW 36

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00525 Published 2026-09-01 Partial fix · 2.8.4, 3.3.5 +1 CWE-184

TI-2026-57980 CVE-2026-84369 · GHSA-4vpr-x523-8j87

LOW 28

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0043 Published 2026-09-01 Partial fix · 2.8.4, 3.3.5 +1 CWE-79

TI-2026-51734 CVE-2026-73650 · GHSA-2p49-hgcm-8545

HIGH 69

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.00435 Published 2026-08-13 Fixed in 2.8.3, 3.3.4 +1 CWE-184