CVE-2022-25759: Convert-Svg-Core Project Convert-Svg-Core

Critical severity, CVSS 9.8. EPSS: 11.5% chance of exploitation in the next 30 days.

The package convert-svg-core before 0.6.2 are vulnerable to Remote Code Injection via sending an SVG file containing the payload.

Affected products

• Convert-Svg-Core Project Convert-Svg-Core: before 0.6.2 (fixed in 0.6.2)

Published 2022-07-22. Last modified 2026-06-17.