{"action":"Upgrade convert-svg-core to 0.6.3 or later.","affected":[{"fixed":"0.6.3","introduced":"0"}],"component":"convert-svg-core","cve_ids":["CVE-2022-24429"],"ecosystem":"npm","epss":0.00914,"exploited":false,"fixed_versions":["0.6.3"],"ghsa_id":"GHSA-54px-mhwv-5v8x","id":"tcs_01M5KF2K5MSRJFAK06HFZ5NYXE","modified_at":"2026-09-10T03:49:43.715460926Z","published_at":"2022-06-11T00:00:17Z","references":["https://osv.dev/vulnerability/GHSA-54px-mhwv-5v8x","https://nvd.nist.gov/vuln/detail/CVE-2022-24429","https://github.com/neocotic/convert-svg/issues/84","https://github.com/neocotic/convert-svg/commit/a43dffaab0f1e419d5be84e2e7356b86ffac3cf1","https://github.com/neocotic/convert-svg","https://snyk.io/vuln/SNYK-JS-CONVERTSVGCORE-2859212"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-54px-mhwv-5v8x","url":"https://osv.dev/vulnerability/GHSA-54px-mhwv-5v8x"}],"summary":"Code injection via SVG file in convert-svg-core"}