ROOT-APP-NPM-CVE-2021-29059 CVE-2021-29059 in is-svg - Patched by Root

Root has patched CVE-2021-29059 in the is-svg package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2021-28092 CVE-2021-28092 in is-svg - Patched by Root

Root has patched CVE-2021-28092 in the is-svg package for Root:npm. Multiple fixed versions available...

CLSA-2026-1775003203 TuxCare security update for is-svg (2 CVEs)

TuxCare rebuilt is-svg to address 2 CVEs. Fixed in 2.1.0-tuxcare.1...

PT-2026-74272

TuxCare rebuilt is-svg to address 2 CVEs. Fixed in 2.1.0-tuxcare.1...

EUVD-2021-0627

Malware in sbrugna...

EUVD-2021-2579

Malware in sbrugna...

ReDOS in IS-SVG

A vulnerability was discovered in IS-SVG version 4.3.1 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

02-infrastructure (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +11789 more potentially affected by CVE-2021-29059 via is-svg (>=2.1.0, <=4.2.2)

is-svg NPM version =2.1.0, =1.0.0, =1.0.4, =5.0.0, =1.0.3, =0.0.1, =1.0.2, =2.0.0, =1.1.8, =1.0.0, =1.0.4 - 4design 0.0.1 and more Source cves: CVE-2021-29059 Source advisory: OSV:GHSA-R8J5-H5CX-65GG...

GHSA-R8J5-H5CX-65GG ReDOS in IS-SVG

A vulnerability was discovered in IS-SVG version 4.3.1 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

The vulnerability of the IS-SVG library of the NPM package manager, related to the allocation of unlimited memory, allows attackers to cause a service failure.

The vulnerability of the NPM package manager’s IS-SVG library is related to the allocation of unlimited memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Regular Expression Denial Of Service (ReDoS)

is-svg is vulnerable to regular expression denial of service. An attacker may input a malicious crafted SVG string, causing the system to crash...

CVE-2021-29059

A flaw was found in IS-SVG where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string. The highest threat from this vulnerability is to system availability...

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

Code injection

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

CVE-2021-29059

CVE-2021-29059 affects the IS-SVG library, with versions 2.1.0–4.2.2 and earlier, where a crafted invalid SVG string can trigger a Regular Expression Denial of Service (ReDOS) in the SVG validation/check process. The description does not specify affected vendors or products beyond IS-SVG, nor a p...

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

CVE-2021-29059

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...

PT-2021-3401

Name of the Vulnerable Software and Affected Versions IS-SVG versions 2.1.0 through 4.3.1 Description The issue is related to a Regular Expression Denial of Service ReDOS that occurs when the application checks a crafted invalid SVG string. This can lead to unlimited memory allocation, potentiall...

CVE-2021-29059: Allocation of Resources Without Limits or Throttling

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service ReDOS occurs if the application is provided and checks a crafted invalid SVG string...