https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T00:23:30.381622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-234450 EUVD-2026-234450 2026-10-10T00:23:30.384801+00:00 EUVD-2026-234450 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23638 fkie_cve-2022-23638 2026-10-10T00:23:30.384840+00:00

svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.

 https://cve.radiocsirt.org/vuln/ghsa-fqx8-v33p-4qcc GHSA-fqx8-v33p-4qcc — Cross-site Scripting in enshrined/svg-sanitize 2026-10-10T00:23:30.384875+00:00

Affected: Packagist: enshrined/svg-sanitize

### Impact SVG sanitizer library before version `0.15.0` did not remove HTML elements wrapped in a CDATA section. As a result, SVG content embedded in HTML (fetched as `text/html`) was susceptible to cross-site scripting. Plain SVG files (fetched as `image/svg+xml`) were not affected.

### Patches This issue is fixed in `0.15.0` and higher.

### Workarounds There is currently no workaround available without upgrading.

### For more information If you have any questions or comments about this advisory: * Open an issue in [Github](https://github.com/darylldoyle/svg-sanitizer/issues) * Email us at [daryll@enshrined.co.uk](mailto:daryll@enshrined.co.uk)

 https://cve.radiocsirt.org/vuln/gsd-2022-23638 gsd-2022-23638 2026-10-10T00:23:30.384905+00:00 gsd-2022-23638 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-23638 UBUNTU-CVE-2022-23638 2026-10-10T00:23:30.384918+00:00

Affected: Ubuntu:22.04:LTS: spip, Ubuntu:24.04:LTS: spip, Ubuntu:25.10: spip, Ubuntu:26.04:LTS: spip

svg-sanitizer is a SVG/XML sanitizer written in PHP. A cross-site scripting vulnerability impacts all users of the `svg-sanitizer` library prior to version 0.15.0. This issue is fixed in version 0.15.0. There is currently no workaround available.