Login Request a demo
SV
Product
svgo
by svg · last CVE Sep 1, 2026
4
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add svgo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84370
8.2
1%
Sep 1
SVGO: removeScripts allows executable links through namespace and control-character bypasses
Affected: >= 1.0.0, < 2.8.4; >= 3.0.0, < 3.3.5; >= 4.0.0, < 4.1.0
CVE-2026-73650
8.2
0%
Aug 13
SVGO: removeScripts plugin leaves some executable scripts intact
Affected: >= 1.0.0, < 2.8.3; >= 3.0.0, < 3.3.4; >= 4.0.0, < 4.0.2
CVE-2026-29074
7.5
1%
Mar 6
SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)
Affected: >= 2.1.0, < 2.8.1; >= 3.0.0, < 3.3.3; = 4.0.0
CVE-2026-84369
6.1
0%
Sep 1
SVGO: removeScripts incompletely sanitizes executable HTML in SVG foreignObject elements
Affected: >= 1.0.0, < 2.8.4; >= 3.0.0, < 3.3.5; >= 4.0.0, < 4.1.0
Showing 4