CVE-2026-29112 | DiceBear up to 9.3.x SVG ensureSize allocation of resources (GHSA-v3r3-4qgc-vw66)

March 18, 2026 Yanac

A vulnerability, which was classified as problematic, was found in DiceBear up to 9.3.x. Affected by this vulnerability is the function ensureSize of the component SVG Handler. Executing a manipulation can lead to allocation of resources.

This vulnerability is tracked as CVE-2026-29112. The attack can be launched remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More