composer

phenx/php-svg-lib

Security advisories for phenx/php-svg-lib, newest first. 3 known, all fixed. If you’re on 0.5.2 or later, none of them affect you.

RSS feed Check your lock file →

Latest version

1.0.2

Advisories

3 · 0 unfixed

Last advisory

22 Feb 2024

Safe from

0.5.2

3 advisories · newest first

CRITICAL10.0 22 Feb 2024

Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE

GHSA-97m3-52wr-xvv2

Affected

< 0.5.2

Fixed in

0.5.2

Published

22 Feb 2024

MODERATE6.8 21 Feb 2024

php-svg-lib lacks path validation on font through SVG inline styles

GHSA-f3qr-qr4x-j273 · CVE-2024-25117

Affected

< 0.5.2

Fixed in

0.5.2

Published

21 Feb 2024

MODERATE5.3 13 Dec 2023

Denial of service caused by infinite recursion when parsing SVG document

GHSA-ff5x-7qg5-vwf2 · CVE-2023-50251

Affected

< 0.5.1

Fixed in

0.5.1

Published

13 Dec 2023

/advisories/composer/phenx/php-svg-lib/feed.rss

From Packagist and the GitHub advisory database · synced hourly

Know when your sites are affected.

Porro reads composer.lock and package-lock from every site on your care plans and puts the ones that need you at the top. Updates arrive as pull requests.

Start your free trial →