CVE-2019-18857
1 advisory.
Packagist/enshrined/svg-sanitize CVE-2019-18857: high 7.5, EPSS 1.04%
XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes
Action: Upgrade enshrined/svg-sanitize to 0.12.0 or later.
composer require enshrined/svg-sanitize:0.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.0 | - |
Fixed versions
| 0.12.0 |
Sources
- osv: GHSA-gf8j-v8x5-h9qp
- https://nvd.nist.gov/vuln/detail/CVE-2019-18857
- https://github.com/darylldoyle/svg-sanitizer/commit/51ca4b713f3706d6b27769c6296bbc0c28a5bbd0
- https://github.com/darylldoyle/svg-sanitizer
- https://github.com/darylldoyle/svg-sanitizer/compare/0.11.0...0.12.0
CVE-2019-18857 · published · modified · JSON