CVE record · 1 source
CVE-2026-107381
CVSS 6.5svg-sanitizer is a PHP SVG/XML sanitizer.
- Vendor
- Canonical
- Product
- canonical
- CVSS
- 6.5
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
svg-sanitizer is a PHP SVG/XML sanitizer.
svg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/ElementReference/Resolver.php builds the SVG <use> reference graph with a case-sensitive href attribute predicate before…