Security Advisory

CVE-2022-25759

9.9
CRITICAL

Vulnerability Description

The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.
Published Date July 22, 2022
Official Source NIST NVD Advisory