enshrined/svg-sanitize vulnerabilities

CVEs whose affected-version data names the enshrined/svg-sanitize package (composer). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107381Medium· 6.5

svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences

svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences

▾ Sunlitenshrined · enshrined/svg-sanitizevia GHSA

enshrined/svg-sanitize vulnerabilities (CVEs) · VulnSea