CVE-2020-11887: SVG2PNG Project SVG2PNG

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.

Affected products

• SVG2PNG Project SVG2PNG: version 4.1.1 only

Published 2020-04-17. Last modified 2026-06-17.