CVE-2026-117539 | darylldoyle svg-sanitizer 0.12.0/0.15.0/0.22.0 SVG File Upload injection

October 27, 2026 Yanac

A vulnerability classified as problematic was found in darylldoyle svg-sanitizer 0.12.0/0.15.0/0.22.0. Affected is an unknown function of the component SVG File Upload Handler. The manipulation results in injection.

This vulnerability is known as CVE-2026-117539. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More