CVE-2023-46035

RubyGems/svg_optimizer CVE-2023-46035: medium

svg_optimizer rubygem external XML entity (XXE) vulnerability

Action: Upgrade svg_optimizer to 0.3.0 or later.

bundle update svg_optimizer

Affected

Fixed versions

Sources

• osv: GHSA-6hvg-62q8-95v7
• https://github.com/fnando/svg_optimizer/pull/17
• https://github.com/fnando/svg_optimizer/commit/8244ff25b51a16892496e9d9f7191dba393f7af0
• https://github.com/fnando/svg_optimizer/commit/b1b5013db297494daba5676b9fa4423ffc5e96fa
• https://github.com/fnando/svg_optimizer
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/svg_optimizer/CVE-2023-46035.yml

CVE-2023-46035 · published 2023-10-20T13:23:32Z · modified 2023-11-08T04:13:40.269769Z · JSON