CVE-2022-23638
1 advisory.
Packagist/enshrined/svg-sanitize CVE-2022-23638: medium 6.2
Cross-site Scripting in enshrined/svg-sanitize
Action: Upgrade enshrined/svg-sanitize to 0.15.0 or later.
composer require enshrined/svg-sanitize:0.15.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15.0 | - |
Fixed versions
| 0.15.0 |
Sources
- osv: GHSA-fqx8-v33p-4qcc
- https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-fqx8-v33p-4qcc
- https://nvd.nist.gov/vuln/detail/CVE-2022-23638
- https://github.com/darylldoyle/svg-sanitizer/issues/71
- https://github.com/darylldoyle/svg-sanitizer/commit/17e12ba9c2881caa6b167d0fbea555c11207fbb0
- https://github.com/FriendsOfPHP/security-advisories/blob/master/enshrined/svg-sanitize/CVE-2022-23638.yaml
- https://github.com/advisories/GHSA-fqx8-v33p-4qcc
- https://github.com/darylldoyle/svg-sanitizer
CVE-2022-23638 · published · modified · JSON