CPE
The SVG Sanitization component in rhukster dom-sanitizer versions 1.0.15 and earlier contains an incomplete blacklist vulnerability in src/DOMSanitizer.php, allowing remote attackers to bypass security filters via malicious URL inputs.