Convert Svg Core
Approved changes feed: RSS · Atom
cpe:2.3:a:convert-svg-core_project:convert-svg-core:*:*:*:*:*:node.js:*:*part: a version: * update: *
| Vendor | Convert Svg Core Project (f2f4548e-c2b9-5146-a958-c6b8226f88e1) |
|---|---|
| Product | Convert Svg Core (a5e37341-77ca-5771-a551-c8c93f656a72) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | node.js |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-25759 |
vulnerable | 2026-06-08 05:41:49.385503 |
Remote Code Injection
CRITICAL (9.9)
The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.
Published: 2022-07-22T20:00:19.307Z
Updated: 2024-09-16T20:06:21.031Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-24429 |
vulnerable | 2026-06-08 05:41:00.564142 |
Arbitrary Code Injection
HIGH (7.5)
The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file.
Published: 2022-06-10T20:00:38.006Z
Updated: 2024-09-17T01:50:44.179Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23631 |
vulnerable | 2026-06-08 05:30:03.027118 |
Directory Traversal
HIGH (7.5)
This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a converted PNG file.
Published: 2022-01-21T20:05:23.621Z
Updated: 2024-09-16T18:07:59.806Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.