cve.nowby Sazabi

npmPackage

svg2png

1 known vulnerability, with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 1

Registry: npm

Advisories 1

CVE-2020-11887Unrated
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.
Affected: through 4.1.1.