CVE-2022-25759

creationtimestamp| type| source ---|---|--- 2022-07-23 00:00:16+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-5gxc-fxcr-9326 2022-07-23 00:23:46+00:00| seen| https://t.me/cibsecurity/46839 2024-04-23 20:00:31+00:00| seen| https://t.me/arpsyndicate/4775...

CVE-2022-25759

The CVE-2022-25759 issue affects the convert-svg-core npm package, specifically versions before 0.6.2. It enables remote code injection by processing an SVG containing a payload (notably via an onload attribute). Impact is remote code execution when using the vulnerable library in conjunction wit...