CVE-2025-56515
1 advisory.
npm/fiora CVE-2025-56515: low, EPSS 0.52%
Fiora chat group avatar is vulnerable to XSS via SVG files
Action: No fix published. Pin and monitor.
Affected
No affected ranges in the source.
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-2c6j-vw6r-mfch
- https://nvd.nist.gov/vuln/detail/CVE-2025-56515
- https://fiora.suisuijiang.com
- https://github.com/Kov404/CVE-2025-56515/tree/main
- https://github.com/yinxin630/fiora
CVE-2025-56515 · published · modified · JSON