CVE-2026-104861 | nodeca probe-image-size up to 7.3.x SVG Parser lib/parse_sync/svg.js probe.sync resource consumption

October 2, 2026 Yanac

A vulnerability classified as problematic has been found in nodeca probe-image-size up to 7.3.x. This affects the function probe.sync of the file lib/parse_sync/svg.js of the component SVG Parser. The manipulation leads to resource consumption.

This vulnerability is referenced as CVE-2026-104861. Remote exploitation of the attack is possible. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More