Skip to content
Threat Feed
Subscribe

Product

Probe-Image-Size (<= 7.3.0)

1 brief RSS
low advisory

Quadratic-time Denial of Service in probe-image-size SVG Parser

The probe-image-size package is vulnerable to a denial-of-service attack due to a regular expression exhibiting quadratic time complexity when processing maliciously crafted SVG payloads.

probe-image-size denial-of-service nodejs software-vulnerability
1t 1c