7 matches found
CVE-2026-117539
darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...
CVE-2026-117539 darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass
darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...
EUVD-2026-110804
darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...
CVE-2026-117539
The darylldoyle svg-sanitizer (versions before 1.0.0 ) is vulnerable to CSS injection and remote reference bypass vulnerabilities. By uploading crafted SVG files, an attacker can embed external resources through unsanitized style content, unquoted url() values, or image href attributes. This may ...
CVE-2026-117539
darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...
CVE-2026-117539 darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass
darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...
PT-2026-126374
darylldoyle svg-sanitizer before 1.0.0 contains CSS injection and remote reference bypass vulnerabilities that allow attackers to embed external resources by uploading crafted SVG files. Attackers can use unsanitized style content, unquoted url values, or image href attributes to exfiltrate page...