Vulnerabilities
Summary — last 7 days
New vulnerabilities5,370▲ 2,556 vs. last week
Critical / high3,029▲ 1,703 vs. last week
New active exploitation (KEV)7▲ 1 vs. last week
Unscored (no CVSS)173▼ 27 vs. last week
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Modified | Medium (5.4) | 0.56% | — | Shubhamjain SVG Loader | 8/14/2023 | 6/17/2026 | SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place. According to the docs, svg-loader will strip all JS code before injecting the SVG file for security reasons but the input sanitization logic is not sufficient and can be trivially bypassed. This… |