CVE-2026-94077 Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions

Description

Contributor Cross Site Scripting (XSS) in Safe SVG <= 2.5.0 versions.

Affected products and versions

Product	Affected versions	Fixed in
Safe SVG 2.5	earliest → 2.5.0	No fix stated

Other CVEs of Safe SVG

The 2 CVEs of Safe SVG →

CVE-2026-94672 Contributor Insecure Direct Object References (IDOR) in Safe SVG <= 2.5.0 versions 4.3 Medium