medium6.1
CVE-2020-11887
XSS in svg2png (NPM package)
Impact
svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | svg2png | <= 4.1.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Svg2png Project | Svg2png | Version 4.1.1 |