{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3asvg-sanitizersvg-sanitizer/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:svg-sanitizer:svg-sanitizer:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.5,"id":"CVE-2026-117540"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["svg-sanitizer (\u003e= 0.5.3, \u003c 1.1.0)"],"_cs_severities":["low"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003eA denial of service vulnerability exists in the svg-sanitizer library (versions 0.5.3 up to 1.1.0). The Sanitizer::sanitize() method performs inefficient regex processing when stripping PHP tags from input. By providing a specially crafted SVG file containing a high density of overlapping PHP tag openers and closers, an attacker can trigger quadratic complexity in the preg_replace function. This results in prolonged CPU usage, potentially leading to service exhaustion for applications relying on the library for SVG processing.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated attackers to trigger sustained, high CPU utilization on the server processing the SVG input, leading to service disruption or denial of service.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpgrade the svg-sanitizer library to version 1.1.0 or later immediately to incorporate the fix for regex complexity. If immediate patching is not possible, implement strict file size and complexity limits for uploaded SVG files as an interim mitigation.\u003c/p\u003e\n","date_modified":"2026-10-27T11:47:03Z","date_published":"2026-10-27T11:47:03Z","id":"https://feed.craftedsignal.io/briefs/2026-10-svg-sanitizer-dos/","summary":"The svg-sanitizer library, versions 0.5.3 through 1.0.x, contains a denial-of-service vulnerability in the Sanitizer::sanitize method that allows unauthenticated attackers to exhaust CPU resources via crafted SVG files.","title":"svg-sanitizer: Denial of service via regex complexity (CVE-2026-117540)","url":"https://feed.craftedsignal.io/briefs/2026-10-svg-sanitizer-dos/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:svg-Sanitizer:svg-Sanitizer:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}