CVE-2026-121447Medium· 6.1▾ Sunlitsvg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by placing javascript: URLs in the animateTransform values attribute. Attackers can upload crafted SVG files whose anim…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 5.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
svg-sanitizer before 1.1.0 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization by placing javascript: URLs in the animateTransform values attribute. Attackers can upload crafted SVG files whose animateTransform targets the href attribute, executing arbitrary JavaScript when Safari users click the link.
svg-sanitizer < 1.1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-117539Low· 3.5darylldoyle svg-sanitizer before 1.0.0 CSS Injection and Remote Reference Bypass
CVE-2026-107380Medium· 5.4savg-sanitizer is a PHP SVG/XML sanitizer
CVE-2026-121444High· 7.5svg-sanitizer 0.11.0 before 1.1.0 Algorithmic Complexity DoS via use Reference Graph
CVE-2026-121445Medium· 5.9svg-sanitizer 1.0.0 before 1.1.0 ReDoS and Fail-Open via image-set CSS Stripping
CVE-2026-121446Medium· 4.3svg-sanitizer 0.5.0 before 1.1.0 Incomplete url() Filtering in SVG Attributes
CVE-2026-121443Medium· 5.3svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag