CVE-2026-105708 | imgproxy up to 4.0.17 SVG processing/svg/svg.go sanitizeElement cross site scripting (Issue 1708)

October 5, 2026 Yanac

A vulnerability labeled as problematic has been found in imgproxy up to 4.0.17. Affected by this vulnerability is the function sanitizeElement of the file processing/svg/svg.go of the component SVG Handler. Executing a manipulation can lead to cross site scripting.

This vulnerability is registered as CVE-2026-105708. It is possible to launch the attack remotely. Furthermore, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More