HIGH7.5npm
GHSA-7j2x-32w6-p43p· CVE-2026-33418SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()
Modified: 3/25/2026
package
pkg:npm/%40dicebear/converter
SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()
Modified: 3/25/2026
Uncontrolled memory allocation via crafted SVG dimensions in @dicebear/converter
Modified: 3/19/2026