darylldoyle vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20251
3. 202611

Newest CVEs

• CVE-2026-121447

  svg-sanitizer before 1.1.0 XSS via animateTransform on Safari

  darylldoyle · svg-sanitizer

  Medium5.3
• CVE-2026-121446

  svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes

  darylldoyle · svg-sanitizer

  Medium5.3
• CVE-2026-121445

  svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping

  darylldoyle · svg-sanitizer

  High8.2
• CVE-2026-121444

  svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph

  darylldoyle · svg-sanitizer

  High8.7
• CVE-2026-121443

  svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag

  darylldoyle · svg-sanitizer

  Medium6.9
• CVE-2026-117541

  svg-sanitizer 0.11.0 before 1.1.0 Uncaught LogicException DoS via sanitize()

  darylldoyle · svg-sanitizer

  Medium6.9
• CVE-2026-117540

  svg-sanitizer before 1.1.0 Quadratic CPU-Exhaustion DoS via PHP-Tag Stripping Loop

  darylldoyle · svg-sanitizer

  High8.7
• CVE-2026-117539

  darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass

  darylldoyle · svg-sanitizer

  Medium5.1
• CVE-2026-107381

  svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences

  darylldoyle · svg-sanitizer

  Medium6.5
• CVE-2026-107380

  enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision

  darylldoyle · svg-sanitizer

  Medium5.4