EPSS
Percentile
59.2%
is-svg is vulnerable to regular expression denial of service. An attacker is able to crash the application via a malicious SVG/XML document due to the usage of an insecure regular expression.
github.com/advisories/GHSA-7r28-3m3f-r2pr
github.com/sindresorhus/is-svg/commit/01f8a087fab8a69c3ac9085fbb16035907ab6a5b
github.com/sindresorhus/is-svg/releases
github.com/sindresorhus/is-svg/releases/tag/v4.2.2
security.netapp.com/advisory/ntap-20210513-0008/
www.npmjs.com/package/is-svg