[MEDIUM] svg-sanitizer Bypasses Attribute Sanitization

PKSA-4g5g-4rkv-myqs CVE-2025-55166 GHSA-22wq-q86m-83fh

Affected version: <0.22.0

Reported by:
GitHub

[MEDIUM] A cross-site scripting vulnerability

PKSA-wsdr-wpj7-1wz2 CVE-2022-23638 GHSA-fqx8-v33p-4qcc

Affected version: <0.15.0

Reported by:
FriendsOfPHP/security-advisories, GitHub

[MEDIUM] Sanitizer bypass in svg-sanitizer

PKSA-6k9z-6kz2-wy1k CVE-2019-10772 GHSA-8rc5-hx3v-2jg7

Affected version: <0.13.1

Reported by:
GitHub

[HIGH] XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

PKSA-kv5d-dmjs-n5mp CVE-2019-18857 GHSA-gf8j-v8x5-h9qp

Affected version: <0.12.0

Reported by:
GitHub