CVE-2026-94545
Mở trang đầy đủCVSS 5.3 MEDIUM
Satori-generated SVG has improper escaping
Mô tả
Impact
Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup.
The impact depends on how the generated SVG is consumed.
Workaround
No complete workaround exists besides upgrading. Applications that cannot immediately upgrade should not render attacker-controlled content with Satori.
Điểm và phân loại
- CVSS
- 5.3 MEDIUM v4.0
- Nguồn điểm
- GitHub Advisory
- Mức độ (theo nguồn)
- MEDIUM
- EPSS
- 1.08%
- CWE
- CWE-116
Vector CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N
Ảnh hưởng
| Package | Bản bị ảnh hưởng | Bản đã sửa |
|---|---|---|
npm satori |
>= 0.0.27, < 0.33.5 |
0.33.5
|
Vì sao bị lọc
- CVSS 5.3 < 8.0 và không thuộc CISA KEV
Loại tác động
Không nhận ra loại tác động nào từ CWE, vector hay mô tả.
Dữ liệu riêng của nguồn
- OSV.dev · ID
- GHSA-wx4j-mvgx-mqwp
Tham khảo
- https://github.com/advisories/GHSA-wx4j-mvgx-mqwp
- https://github.com/vercel/next.js/security/advisories/GHSA-vcvr-r3jv-pc5j
- https://github.com/vercel/satori/security/advisories/GHSA-wx4j-mvgx-mqwp
- https://nvd.nist.gov/vuln/detail/CVE-2026-94545
- https://github.com/vercel/satori/pull/814
- https://github.com/vercel/next.js/commit/868fad38690d72088868f299fa2bef339b26838e
- https://github.com/vercel/satori/commit/26a52affc031216fee5882b6e965c8dbc7ac1782
- https://github.com/vercel/next.js/releases/tag/v16.3.6
- https://osv.dev/vulnerability/GHSA-wx4j-mvgx-mqwp
- https://github.com/vercel/satori