Known vulnerabilities in SVG Sanitizer

Software: SVG Sanitizer
Software CPE: cpe:2.3:a:darylldoyle:svg_sanitizer:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SVG Sanitizer SVG Sanitizer is affected by 10 known vulnerabilities: 1 medium, 9 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU146566 - Type confusion
CVE-2026-107379
CWE-843 Low
No
No
1.0.0 01.09.2026 SB2026090131
#VU146565 - Improper input validation
CVE-2026-107380
CWE-20 Low
No
No
1.0.0 01.09.2026 SB2026090131
#VU146561 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
1.0.0 01.09.2026 SB2026090131
#VU146562 - Improper input validation
CWE-20 Low
No
No
1.0.0 01.09.2026 SB2026090131
#VU146563 - Improper input validation
CWE-20 Low
No
No
1.0.0 01.09.2026 SB2026090131
#VU146564 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CWE-451 Low
No
No
1.0.0 01.09.2026 SB2026090131
#VU146560 - Improper Handling of Case Sensitivity
CVE-2026-107381
CWE-178 Medium
No
No
1.0.0 01.09.2026 SB2026090131
#VU114204 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-55166
CWE-79 Low
No
No
0.22.0 18.08.2025 SB2025081893
#VU73877 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28426
CWE-79 Low
No
No
0.16.0 21.03.2023 SB2023032121
#VU60753 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23638
CWE-79 Low
No
No
0.15.0 22.02.2022 SB2022022209