{"schema":"vulnpedia.research/1","cve":"CVE-2026-107381","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f","tags":["x_refsource_CONFIRM","exploit","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T14:53:40.415Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T14:53:40.415Z","url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-18T13:36:27.865Z","url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f"},{"source":"nvd","sourceId":"CVE-2026-107381","modified":"2026-10-18T14:16:54.040","url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-m9xh-6747-9r6f"}]},{"url":"https://github.com/darylldoyle/svg-sanitizer/commit/2dff6628314de8519155b7feb218bbe132785757","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T14:53:40.415Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T14:53:40.415Z","url":"https://github.com/darylldoyle/svg-sanitizer/commit/2dff6628314de8519155b7feb218bbe132785757"},{"source":"nvd","sourceId":"CVE-2026-107381","modified":"2026-10-18T14:16:54.040","url":"https://github.com/darylldoyle/svg-sanitizer/commit/2dff6628314de8519155b7feb218bbe132785757"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","url":"https://github.com/darylldoyle/svg-sanitizer/commit/2dff6628314de8519155b7feb218bbe132785757"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","url":"https://github.com/darylldoyle/svg-sanitizer/commit/2dff6628314de8519155b7feb218bbe132785757"}]},{"url":"https://github.com/darylldoyle/svg-sanitizer/releases/tag/1.0.0","tags":["x_refsource_MISC","WEB"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T14:53:40.415Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-14T14:53:40.415Z","url":"https://github.com/darylldoyle/svg-sanitizer/releases/tag/1.0.0"},{"source":"nvd","sourceId":"CVE-2026-107381","modified":"2026-10-18T14:16:54.040","url":"https://github.com/darylldoyle/svg-sanitizer/releases/tag/1.0.0"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","url":"https://github.com/darylldoyle/svg-sanitizer/releases/tag/1.0.0"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","url":"https://github.com/darylldoyle/svg-sanitizer/releases/tag/1.0.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-m9xh-6747-9r6f","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","origins":[{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","url":"https://osv.dev/vulnerability/GHSA-m9xh-6747-9r6f"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","url":"https://osv.dev/vulnerability/GHSA-m9xh-6747-9r6f"}]},{"url":"https://github.com/darylldoyle/svg-sanitizer","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","origins":[{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","url":"https://github.com/darylldoyle/svg-sanitizer"},{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","url":"https://github.com/darylldoyle/svg-sanitizer"}]},{"source":"euvd","sourceId":"EUVD-2026-101125","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101125","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-101125","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-101125"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","url":"https://osv.dev/vulnerability/GHSA-m9xh-6747-9r6f","ecosystem":"Packagist","name":"enshrined/svg-sanitize","purl":"pkg:composer/enshrined/svg-sanitize","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0"}]}],"versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.10.0","0.11.0","0.12.0","0.13.0","0.13.1","0.13.2","0.13.3","0.14.0","0.14.1","0.15.0","0.15.1","0.15.2","0.15.3","0.15.4","0.16.0","0.17.0","0.18.0","0.19.0","0.2.0","0.2.1","0.20.0","0.21.0","0.22.0","0.3.0","0.4.0","0.4.1","0.5.0","0.5.1","0.5.2","0.5.3","0.5.3.1","0.6.0","0.7.0","0.7.1","0.7.2","0.8.0","0.8.1","0.8.2","0.9.0","0.9.1","0.9.2"],"databaseSpecific":{"last_known_affected_version_range":"<= 0.22.0","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/10/GHSA-m9xh-6747-9r6f/GHSA-m9xh-6747-9r6f.json"},"modified":"2026-10-08T20:00:06.562026594Z","origins":[{"source":"ghsa","sourceId":"GHSA-m9xh-6747-9r6f","modified":"2026-10-08T20:00:06.562026594Z","url":"https://osv.dev/vulnerability/GHSA-m9xh-6747-9r6f"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}