CLSA-2026-1775003203 TuxCare security update for is-svg (4 CVEs)

TuxCare rebuilt is-svg to address 4 CVEs. Fixed in 2.1.0-tuxcare.1...

GHSA-7R28-3M3F-R2PR Regular Expression Denial of Service (ReDoS)

The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service ReDoS. If an attacker provides a malicious string, is-svg will get stuck processing the input...

Regular Expression Denial Of Service (ReDoS)

is-svg is vulnerable to regular expression denial of service. An attacker is able to crash the application via a malicious SVG/XML document due to the usage of an insecure regular expression...