HIGH7.5npm
GHSA-7j2x-32w6-p43p· CVE-2026-33418SVG Dimension Capping Bypass via XML Comment Injection in @dicebear/converter ensureSize()
Modified: 3/25/2026
package
npm/@dicebear/converter
pkg:npm/%40dicebear/converter
HIGH7.5npm
GHSA-v3r3-4qgc-vw66· CVE-2026-29112Uncontrolled memory allocation via crafted SVG dimensions in @dicebear/converter
Modified: 3/19/2026