darylldoyle svg-sanitizer

• CVE-2026-121447 Medium 6.1 svg-sanitizer before 1.1.0 XSS via animateTransform on Safari 0.2%
• CVE-2026-121446 Medium 4.3 svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes 0.2%
• CVE-2026-121445 Medium 5.9 svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping 0.4%
• CVE-2026-121444 High 7.5 svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph 0.4%
• CVE-2026-121443 Medium 5.3 svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag 0.3%
• CVE-2026-117541 Medium 5.3 svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize() 0.3%
• CVE-2026-117540 High 7.5 svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop 0.4%
• CVE-2026-117539 Low 3.5 darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass 0.2%
• CVE-2026-107381 Medium 6.5 svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences 0.5%
• CVE-2026-107380 Medium 5.4 enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision 0.3%
• CVE-2026-107379 Medium 6.5 enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash 0.5%
• CVE-2025-55166 Medium 5.1 svg-sanitizer By-Passing Attribute Sanitization 0.5%
• CVE-2022-23638 Medium 6.2 Cross-site Scripting in svg-sanitizer 0.7%