svgo has 4 CVEs on record. 2 were published in the last 90 days. The median CVSS is 7.8 (high). The most common weakness class is CWE-79 (3).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 2 prev 1
Worst active — by depth score
CVE-2026-84370High· 8.2SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files45GHSA-2p49-hgcm-8545High· 8.2SVGO removeScripts plugin leaves some executable scripts intact45CVE-2026-29074High· 7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files41CVE-2026-84369Medium· 6.1SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files34
svgo vulnerabilities
CVEs affecting svgo, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-84370High· 8.2SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in removeScripts plugin, named removeScriptElement in versions …
CVE-2026-84369Medium· 6.1SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 1.0.0 until versions 2.8.4, 3.3.5, and 4.1.0, the opt-in removeScripts plugin, named removeScriptElement in versions …
GHSA-2p49-hgcm-8545High· 8.2SVGO removeScripts plugin leaves some executable scripts intact
SVGO removeScripts plugin leaves some executable scripts intact
CVE-2026-29074High· 7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before version 3.3.3, and before version 4.0.1, SVGO accepts XML…