https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T21:46:36.355036+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-121444 CVE-2026-121444 — svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph 2026-11-05T21:46:36.357172+00:00

Affected: darylldoyle svg-sanitizer

svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop() and countUse() of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use elements, forcing exponential path enumeration that pins PHP workers for hours.