convert-svg-core project vulnerabilities

Recent CVEs affecting convert-svg-core project products. 3 tracked.

convert-svg-core project has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-07-22. Highest priority: CVE-2022-25759 (score 64/100).

• CVE-2022-25759 CRITICAL 9.9 UPGRADE The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file cont
• CVE-2022-24429 HIGH 7.5 UPGRADE The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially cr
• CVE-2021-23631 HIGH 7.5 MITIGATE This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all version

FAQ

How do I fix convert-svg-core project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is convert-svg-core project being exploited right now?

None of the tracked convert-svg-core project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which convert-svg-core project CVE should I patch first?

CVE-2022-25759 currently ranks highest (64/100): The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file cont.

Products

• convert-svg-core

RSS feed for convert-svg-core project · ← Back to latest CVEs