- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 1 · 1 critical
- Registry
- npm
Advisories 1
- CVE-2025-25977Critical 9.8
An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement.
Affected: from 4.0.0, fixed in 4.0.3; fixed in 3.0.11.