[ Vendor · 3 CVEs ]
darylldoyle
CVEs affecting darylldoyle published in the last 30 days, plus any darylldoyle CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-107381 | 14 Oct 2026 | CVSS 6.5 | svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferencessvg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, Resolver::processReferences() in src/ElementReference/Resolver.php builds the SVG <use>… | Fix |
| CVE-2026-107379 | 8 Oct 2026 | CVSS 6.5 | enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crashsavg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD with a #FIXED attribute default to make… | Fix |
| CVE-2026-107380 | 8 Oct 2026 | CVSS 5.4 | enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collisionsavg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer's isHrefSafeValue() validates an SVG href after XML DTD entity expansion… | Fix |