CVE-2025-56514
1 advisory.
npm/fiora CVE-2025-56514: low, EPSS 0.29%
Fiora chat user avatar is vulnerable to XSS via SVG files
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hg3j-6pmh-mvjr
- https://nvd.nist.gov/vuln/detail/CVE-2025-56514
- https://fiora.suisuijiang.com
- https://github.com/Kov404/CVE-2025-56514/tree/main
- https://github.com/yinxin630/fiora
CVE-2025-56514 · published · modified · JSON