CVE-2021-29059 PUBLISHED

Reported by mitre · Published June 21, 2021

A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string.

Affected Products

VendorProductVersions
n/an/an/a
npmis-svg2.1.0
n/an/an/a, n/a

Timeline

References

Open in Interactive Console →