{"action":"Upgrade phenx/php-svg-lib to 0.5.2 or later.","affected":[{"fixed":"0.5.2","introduced":"0"}],"component":"phenx/php-svg-lib","cve_ids":["CVE-2024-25117"],"ecosystem":"Packagist","epss":0.00932,"exploited":false,"fixed_versions":["0.5.2"],"ghsa_id":"GHSA-f3qr-qr4x-j273","id":"tcs_01M5KF1D97KSZZ0RNT4ZYMYJ4B","modified_at":"2026-09-10T03:50:06.245766438Z","published_at":"2024-02-21T18:04:16Z","references":["https://osv.dev/vulnerability/GHSA-f3qr-qr4x-j273","https://github.com/dompdf/php-svg-lib/security/advisories/GHSA-f3qr-qr4x-j273","https://nvd.nist.gov/vuln/detail/CVE-2024-25117","https://github.com/dompdf/php-svg-lib/commit/732faa9fb4309221e2bd9b2fda5de44f947133aa","https://github.com/dompdf/php-svg-lib/commit/8ffcc41bbde39f09f94b9760768086f12bbdce42","https://github.com/dompdf/php-svg-lib"],"severity":{"label":"medium","score":6.8},"sources":[{"source":"osv","source_id":"GHSA-f3qr-qr4x-j273","url":"https://osv.dev/vulnerability/GHSA-f3qr-qr4x-j273"}],"summary":"php-svg-lib lacks path validation on font through SVG inline styles"}