CVE-2026-121446

The svg-sanitizer library (versions 0.5.0 to before 1.1.0) contains an incomplete filtering vulnerability in SVG presentation attributes. Attackers can bypass remote URL removal by using CSS escape sequences inside the url() function. By providing SVG files with attributes like fill containing es...

CVE-2026-121446: darylldoyle svg-sanitizer: svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass…

svg-sanitizer from 0.5.0 before 1.1.0 contains an incomplete filtering vulnerability that allows attackers to bypass remote URL removal by using CSS escape sequences inside url in SVG presentation attributes. Attackers can supply SVG files with attributes like fill containing escaped slashes that...