Description
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.
Remediation
References
https://github.com/domenic/svg2png/issues/117
Related Vulnerabilities
CVE-2022-32287 Vulnerability in maven package org.apache.uima:uimaj-core
CVE-2021-32770 Vulnerability in npm package gatsby-source-wordpress
CVE-2023-34247 Vulnerability in npm package @keystone-6/auth
CVE-2018-19048 Vulnerability in maven package org.webjars.bower:simditor
CVE-2023-36478 Vulnerability in maven package org.eclipse.jetty.http3:http3-qpack