VYPR

Svg Loader

by shubhamjain

Source repositories

CVEs (1)

  • CVE-2023-40013HigAug 14, 2023
    risk 0.39cvss 7.1epss 0.01

    SVG Loader is a javascript library that fetches SVGs using XMLHttpRequests and injects the SVG code in the tag's place. According to the docs, svg-loader will strip all JS code before injecting the SVG file for security reasons but the input sanitization logic is not sufficient…