Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 05 Nov 2026 21:46:24 +0000 CVE-2026-121444 — svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph https://db.gcve.eu/vuln/cve-2026-121444 <p><strong>Affected:</strong> darylldoyle svg-sanitizer</p> <p>svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop() and countUse() of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use elements, forcing exponential path enumeration that pins PHP workers for hours.</p> <p><strong>Affected:</strong> darylldoyle svg-sanitizer</p> <p>svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop() and countUse() of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use elements, forcing exponential path enumeration that pins PHP workers for hours.</p> https://db.gcve.eu/vuln/cve-2026-121444