Product by SVG

    Svgo

    4 known vulnerabilities in Svgo (SVG), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Svgo (SVG)
    HighCVE-2026-84370

    SVGO: removeScripts allows executable links through namespace and control-character bypasses

    		8.2
    HighCVE-2026-73650

    SVGO: removeScripts plugin leaves some executable scripts intact

    		8.2
    HighCVE-2026-29074

    SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

    		7.5
    MediumCVE-2026-84369

    SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements

    		6.1

    All products by SVG