https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-25117.htmlhttps://patchthecve.com/cve/CVE-2024-25117.htmlWed, 17 Jun 2026 07:15:32 +0000MEDIUM 6.8: php-svg-lib is a scalable vector graphics (SVG) file parsing/rendering library. Prior to version 0.5.2, php-svg-lib fails to validate that font-family doesn't contain a PHAR url, which might leads to RCE on PHP < 8.0, and doesn't validate if external references are allowed. This might leads to bypashttps://patchthecve.com/cve/CVE-2023-50252.htmlhttps://patchthecve.com/cve/CVE-2023-50252.htmlWed, 17 Jun 2026 06:39:23 +0000HIGH 8.3: php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `<use>` tag that references an `<image>` tag, it merges the attributes from the `<use>` tag to the `<image>` tag. The problem pops up especially when the `href` attribute from the `<use>` tag has not been shttps://patchthecve.com/cve/CVE-2023-50251.htmlhttps://patchthecve.com/cve/CVE-2023-50251.htmlWed, 17 Jun 2026 06:39:23 +0000MEDIUM 5.3: php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when parsing the attributes passed to a `use` tag inside an svg document, an attacker can cause the system to go to an infinite recursion. Depending on the system configuration and attack pattern this could exhaust the m