svg vulnerabilities
4 published CVEs name svg among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-84370
SVGO: removeScripts allows executable links through namespace and control-character bypasses
svg · svgo
High8.2 - CVE-2026-84369
SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements
svg · svgo
Medium6.1 - CVE-2026-73650
SVGO: removeScripts plugin leaves some executable scripts intact
svg · svgo
High8.2 - CVE-2026-29074
SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)
svg · svgo
High7.5