Поиск уязвимостей
Количество 3
Количество 3
CVE-2026-94545
Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Version 0.33.5 contains a patch. No complete workaround exists besides upgrading. Applications that cannot immediately upgrade should not render attacker-controlled content with Satori.
GHSA-wx4j-mvgx-mqwp
Satori-generated SVG has improper escaping
BDU:2026-15201
Уязвимость компонента ImageResponse пакета next/og программной платформы создания веб-приложений Next.js, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-94545 Satori is a library to convert HTML and CSS to SVG. Starting in version 0.0.27 and prior to version 0.33.5, Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Version 0.33.5 contains a patch. No complete workaround exists besides upgrading. Applications that cannot immediately upgrade should not render attacker-controlled content with Satori. | 1% Низкий | около 1 месяца назад | |
| GHSA-wx4j-mvgx-mqwp Satori-generated SVG has improper escaping | 1% Низкий | 12 дней назад | |
 | BDU:2026-15201 Уязвимость компонента ImageResponse пакета next/og программной платформы создания веб-приложений Next.js, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | около 2 месяцев назад |
Уязвимостей на страницу