- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2
- Registry
- npm
Advisories 2
- CVE-2021-29059Unrated
A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if…
Affected: from 2.1.0, fixed in 4.3.0.
- CVE-2021-28092Unrated
The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service…
Affected: from 2.1.0, fixed in 4.2.2.