NPM: SVGO removeScripts plugin leaves some executable scripts intact

NPM: SVGO removeScripts plugin leaves some executable scripts intact vulnerability discovered by ? in WordPress Npm svgo versions = 1.0.0, 2.8.3...

Incomplete List of Disallowed Inputs

Overview Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs via improper handling of namespaced or prefixed script elements and case-sensitive matching of JavaScript URIs in the removeScripts plugin. An attacker can execute arbitrary scripts in the context of...