Mit Scratch-Svg-Renderer
2 CVEs affecting Mit Scratch-Svg-Renderer. Latest disclosed: 2022-01-06. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-7750 | Critical | 9.6 | 2020-10-21 | This affects the package scratch-svg-renderer before 0.2.0-prerelease.20201019174008. The loadString function does not escape SVG properly, which can be used t… |
CVE-2020-27428 | Medium | 6.1 | 2022-01-06 | A DOM-based cross-site scripting (XSS) vulnerability in Scratch-Svg-Renderer v0.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted sb3… |