CVE-2022-25759
1 advisory.
npm/convert-svg-core CVE-2022-25759: critical 9.8
convert-svg-core vulnerable to remote code injection
Action: Upgrade convert-svg-core to 0.6.2 or later.
npm i convert-svg-core@0.6.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.2 | - |
Fixed versions
| 0.6.2 |
Sources
- osv: GHSA-5gxc-fxcr-9326
- https://nvd.nist.gov/vuln/detail/CVE-2022-25759
- https://github.com/neocotic/convert-svg/issues/81
- https://github.com/neocotic/convert-svg/pull/82
- https://github.com/neocotic/convert-svg/commit/7e6031ac7427cf82cf312cb4a25040f2e6efe7a5
- https://github.com/neocotic/convert-svg
- https://security.snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-2849633
CVE-2022-25759 · published · modified · JSON