2022-07-22 20:00:19
snyk
PUBLISHED
The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.