https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 01:21:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-10393 EUVD-2026-10393 https://cve.radiocsirt.org/vuln/euvd-2026-10393 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50252 <p>php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `&lt;use&gt;` tag that references an `&lt;image&gt;` tag, it merges the attributes from the `&lt;use&gt;` tag to the `&lt;image&gt;` tag. The problem pops up especially when the `href` attribute from the `&lt;use&gt;` tag has not been sanitized. This can lead to an unsafe file read that can cause PHAR Deserialization vulnerability in PHP prior to version 8. Version 0.5.1 contains a patch for this issue.</p> <p>php-svg-lib is an SVG file parsing / rendering library. Prior to version 0.5.1, when handling `&lt;use&gt;` tag that references an `&lt;image&gt;` tag, it merges the attributes from the `&lt;use&gt;` tag to the `&lt;image&gt;` tag. The problem pops up especially when the `href` attribute from the `&lt;use&gt;` tag has not been sanitized. This can lead to an unsafe file read that can cause PHAR Deserialization vulnerability in PHP prior to version 8. Version 0.5.1 contains a patch for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-50252 https://cve.radiocsirt.org/vuln/gsd-2023-50252 gsd-2023-50252 https://cve.radiocsirt.org/vuln/gsd-2023-50252