CVE-2024-25117

Summary: CVE-2024-25117 affects php-svg-lib prior to 0.5.2. The library does not validate that font-family values are not PHAR URLs in SVG font rendering, which can lead to unsafe fontName values being passed to downstream libraries and, in PHP

CVE-2023-50251

The CVE-2023-50251 issue affects php-svg-lib (prior to v0.5.1), a PHP library for parsing/rendering SVGs. Root cause: parsing the attributes of a use tag can trigger recursive references when an id/link points to the same object, creating an infinite recursion; memory exhaustion can follow, poten...

CVE-2023-50252

The CVE-2023-50252 issue affects the PHP SVG library php-svg-lib prior to version 0.5.1. When processing a tag that references an tag, the library merges attributes from into . If the href in is not sanitized, this can lead to an unsafe file read and a PHAR deserialization vulnerability in PH...