Vulnerabilities in darylldoyle
13 resultsCVE-2022-23638MEDIUMCross-site Scripting in svg-sanitizerEPSS 0.7%CVE-2025-55166MEDIUMsvg-sanitizer By-Passing Attribute SanitizationEPSS 0.5%CVE-2026-107379MEDIUMenshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration CrashEPSS 0.5%CVE-2026-107381MEDIUMsvg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferencesEPSS 0.5%CVE-2026-121444HIGHsvg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference GraphEPSS 0.4%CVE-2026-121445HIGHsvg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS StrippingEPSS 0.4%CVE-2026-117540HIGHsvg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping LoopEPSS 0.4%CVE-2026-117541MEDIUMsvg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()EPSS 0.3%CVE-2026-121443MEDIUMsvg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed TagEPSS 0.3%CVE-2026-107380MEDIUMenshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference CollisionEPSS 0.3%CVE-2026-121446MEDIUMsvg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG AttributesEPSS 0.2%CVE-2026-117539MEDIUMdarylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference BypassEPSS 0.2%CVE-2026-121447MEDIUMsvg-sanitizer before 1.1.0 XSS via animateTransform on SafariEPSS 0.2%