Vulnerabilities in dicebear

3 results

CVE-2026-33418HIGH@dicebear/converter ensureSize() Vulnerable to SVG Dimension Capping Bypass via XML Comment InjectionEPSS 0.4%CVE-2026-29112HIGH@dicebear/converter vulnerable to ncontrolled memory allocation via crafted SVG dimensionsEPSS 0.3%CVE-2026-33311MEDIUM@dicebear/core and @dicebear/initials Vulnerable to SVG Injection via Unsanitized OptionsEPSS 0.2%