Convert-Svg-Core Project Convert-Svg-Core
3 CVEs affecting Convert-Svg-Core Project Convert-Svg-Core. Latest disclosed: 2022-07-22. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-25759 | Critical | 9.9 | 2022-07-22 | The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload. |
CVE-2022-24429 | High | 7.5 | 2022-06-10 | The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary fi… |
CVE-2021-23631 | High | 7.5 | 2022-01-21 | This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a special… |