Denial Of Service (DoS)

svg-sanitizer is vulnerable to Denial of Service DoS. The vulnerability is due to improper handling of DTD-defined FIXED attribute defaults during repeated attribute removal in cleanAttributesOnWhitelist, which allows an attacker to submit a crafted SVG that corrupts libxml state and terminates P...

Allocation of Resources Without Limits or Throttling

Overview enshrined/svg-sanitize is a SVG sanitizer for PHP Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the cleanAttributesOnWhitelist process. An attacker can cause the PHP process to crash by uploading a specially crafted SVG file...

GHSA-V383-3RW5-Q8RF enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

Summary A crafted SVG file 1009 bytes crashes the PHP process when sanitized by enshrined/svg-sanitize any version through 0.22.x. The sanitizer's cleanAttributesOnWhitelist method calls DOMElement::removeAttribute twice on the same attribute name — first removing the explicit attribute, then...

enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

Summary A crafted SVG file 1009 bytes crashes the PHP process when sanitized by enshrined/svg-sanitize any version through 0.22.x. The sanitizer's cleanAttributesOnWhitelist method calls DOMElement::removeAttribute twice on the same attribute name — first removing the explicit attribute, then...

PT-2026-108678

Summary A crafted SVG file 1009 bytes crashes the PHP process when sanitized by enshrined/svg-sanitize any version through 0.22.x. The sanitizer's cleanAttributesOnWhitelist method calls DOMElement::removeAttribute twice on the same attribute name — first removing the explicit attribute, then...

PT-2026-108126

Name of the Vulnerable Software and Affected Versions enshrined/svg-sanitize versions prior to 1.0.0 Description A flaw exists in the cleanAttributesOnWhitelist function within src/Sanitizer.php where the software fails to strip DOCTYPE/DTD declarations before processing. An attacker can provide ...