CVE-2026-105708

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2026-105708 imgproxy SVG svg.go sanitizeElement cross site scripting

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2026-105708

A flaw in the SVG Handler component of imgproxy (versions up to 4.0.17 ) allows for Cross-Site Scripting (XSS) . The vulnerability exists in the sanitizeElement function within the processing/svg/svg.go file. This flaw can be triggered via a remote manipulation attack. While the exploit has been ...

EUVD-2026-92960

A flaw has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has...