[MEDIUM] enshrined/svg-sanitize: Stored XSS via DTD Entity / HTML5 Named Character Reference Collision

PKSA-8j6w-3kr7-s9xk CVE-2026-107380 GHSA-9rjx-3jch-6vjf

Affected version: <=0.22.0

Reported by:
GitHub

[MEDIUM] svg-sanitizer: Mixed-case xlink:HrEf skips the `<use>` nesting-DoS check in Resolver::processReferences

PKSA-6j95-1jtb-x6wc CVE-2026-107381 GHSA-m9xh-6747-9r6f

Affected version: <=0.22.0

Reported by:
GitHub

[MEDIUM] enshrined/svg-sanitize: Denial of Service via DTD Attribute Declaration Crash

PKSA-cbx2-m9db-bmzd CVE-2026-107379 GHSA-v383-3rw5-q8rf

Affected version: <=0.22.0

Reported by:
GitHub

[MEDIUM] svg-sanitizer Bypasses Attribute Sanitization

PKSA-4g5g-4rkv-myqs CVE-2025-55166 GHSA-22wq-q86m-83fh

Affected version: <0.22.0

Reported by:
GitHub