@dicebear/core vulnerabilities

CVEs whose affected-version data names the @dicebear/core package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-68921Medium· 4.7

1mo ago

DiceBear is an avatar library for designers and developers

DiceBear is an avatar library for designers and developers. Prior to 9.4.3, @dicebear/core interpolates the rotate option into an SVG transform attribute without XML escaping in addRotate in packages/@dicebear/core/src/utils/svg.ts, whil…

▾ Sunlitdicebear · @dicebear/coreEPSS 0.22%via NVD