npm/@mattkrick/sanitize-svg CVE-2023-22461: high 7.6, EPSS 0.59%
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
Action: Upgrade @mattkrick/sanitize-svg to 0.4.0 or later.
npm i @mattkrick/sanitize-svg@0.4.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.4.0 | - |
Fixed versions
| 0.4.0 |
Sources
- osv: GHSA-h857-2g56-468g
- https://github.com/mattkrick/sanitize-svg/security/advisories/GHSA-h857-2g56-468g
- https://nvd.nist.gov/vuln/detail/CVE-2023-22461
- https://github.com/mattkrick/sanitize-svg/commit/b107e453ede7b58adcccae74a3e474c012eec85d
- https://github.com/mattkrick/sanitize-svg
CVE-2023-22461 · published · modified · JSON