CVE-2026-84369

A flaw was found in SVGO, a tool designed to optimize SVG Scalable Vector Graphics files. The removeScripts feature, which is meant to remove potentially harmful code, fails to fully sanitize executable HTML content embedded within SVG foreignObject elements. This oversight could allow a remote...

CLSA-2026-1791843793 TuxCare security update for svgo (2 CVEs)

TuxCare rebuilt svgo to address 2 CVEs. Fixed in 1.3.2-tuxcare.2...

CVE-2026-84370

A flaw was found in SVGO SVG Optimizer, a Node.js library for optimizing SVG files. The removeScripts plugin, intended to filter executable links, incompletely processes namespace-prefixed SVG anchor elements and fails to remove ASCII control characters before validating URL schemes. A remote...

Security Bulletin: Multiple Vulnerabilities in IBM CloudPak System

Summary Multiple vulnerabilities were addressed in IBM Cloud Pak System version 2.3.6.2. Vulnerability Details CVEID:CVE-2026-29074 DESCRIPTION: SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1,...

CLSA-2026-1790520171 TuxCare security update for svgo (1 CVE)

TuxCare rebuilt svgo to address 1 CVE. Fixed in 1.3.2-tuxcare.1...

PT-2026-107632

TuxCare rebuilt svgo to address 1 CVE. Fixed in 1.3.2-tuxcare.1...

CLSA-2026-1790176195 TuxCare security update for svgo (1 CVE)

TuxCare rebuilt svgo to address 1 CVE. Fixed in 2.8.0-tuxcare.4...

PT-2026-105409

TuxCare rebuilt svgo to address 1 CVE. Fixed in 2.8.0-tuxcare.4...

ROOT-APP-NPM-CVE-2026-84370 CVE-2026-84370 in svgo - Patched by Root

Root has patched CVE-2026-84370 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-AIKIDO-2026-858273 AIKIDO-2026-858273 in svgo - Patched by Root

Root has patched AIKIDO-2026-858273 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-73650 CVE-2026-73650 in svgo - Patched by Root

Root has patched CVE-2026-73650 in the svgo package for Root:npm. Multiple fixed versions available...

PT-2026-105942

Root has patched AIKIDO-2026-858273 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-2P49-HGCM-8545 GHSA-2p49-hgcm-8545 in svgo - Patched by Root

Root has patched GHSA-2p49-hgcm-8545 in the svgo package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-29074 CVE-2026-29074 in svgo - Patched by Root

Root has patched CVE-2026-29074 in the svgo package for Root:npm. Multiple fixed versions available...

CLSA-2026-1788978264 TuxCare security update for svgo (2 CVEs)

TuxCare rebuilt svgo to address 2 CVEs. Fixed in 2.8.0-tuxcare.3...

CLSA-2026-1788978124 TuxCare security update for svgo (2 CVEs)

TuxCare rebuilt svgo to address 2 CVEs. Fixed in 4.0.2-tuxcare.1...

PT-2026-95891

TuxCare rebuilt svgo to address 2 CVEs. Fixed in 2.8.0-tuxcare.3...

PT-2026-95890

TuxCare rebuilt svgo to address 2 CVEs. Fixed in 4.0.2-tuxcare.1...

5ug-cli (>=1.0.68, <=1.4.0), @acronis-platform/figma-fetcher (>=0.1.3, <=0.4.2) +229 more potentially affected by CVE-2026-84370 via svgo (>=3.0.0, <=3.3.3)

svgo NPM version =3.0.0, =1.0.68, =0.1.3, =0.0.1, =0.1.0, =1.2.2, =0.1.20, =0.0.8-alpha.4, =0.0.8-alpha.229, =0.1.0, =11.0.1, =11.1.2 and more Source cves: CVE-2026-84370 Source advisory: OSV:GHSA-W27V-7Q3P-W38R...

@343dev/optimizt (>=12.0.0, <=13.0.0), @agilebot/vitepress-preset (>=0.8.9, <=0.9.6) +82 more potentially affected by CVE-2026-84370 via svgo (>=4.0.0, <=4.0.2)

svgo NPM version =4.0.0, =12.0.0, =0.8.9, =0.0.8, =0.0.1772240426360, =0.1.0, =1.0.0, =2.47.0, =0.16.2, =1.3.0-next.0, =3.0.0-next.0, =6.13.0, =0.0.1769658265953, =21.2.6, =1.6.9, =0.1.0-dev.00e4942, =0.3.0 and more Source cves: CVE-2026-84370 Source advisory: GHSA-W27V-7Q3P-W38R...