CVE-2026-121445
darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular expression denial of service vulnerability in the image-set pattern of
CVSS
5.9
Média
EPSS
0.4%
p32
KEV
—
Exploit Today
10
0-100
Publicado: 3 de nov. de 2026 · Última mod.: 3 de nov. de 2026 · CWE-754
0.4%EPSS · 30 dias0.4%
2026-11-042026-11-07
darylldoyle svg-sanitizer from 1.0.0 before 1.1.0 contains a regular expression denial of service vulnerability in the image-set pattern of stripRemoteCssTokens() when removeRemoteReferences is enabled. Attackers can submit SVGs with many unclosed image-set tokens to exhaust CPU, or trigger PCRE limits causing sanitize() to throw a TypeError and leave unsanitized content.
- github.comhttps://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-94x8-pw3c-6qcq
- www.vulncheck.comhttps://www.vulncheck.com/advisories/svg-sanitizer-1.0.0-before-1.1.0-redos-and-fail-open-via-image-set-css-stripping
- github.comhttps://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-94x8-pw3c-6qcq
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1235887.5 ALT—
———The recursive resolver in Hickory DNS (all versions of the hickory-recursor crate, and hickory-resolver 0.26.0 before 0.26.2) caches an empty connection pool when it follows a referral with no glue records and all queries for the name servers' IP addresses fail. An attacker able to spoof DNS responses can make these lookups fail, causing all subsequent queries for the affected zone to fail until the cache entry expires or is evicted.4hCVE-2026-69066—3.4%
——1Memory corruption in GPU driver due to improper validation of VMID reservation.1dCVE-2026-69006—3.4%
——1Insufficient validation of length fields in the GNSS firmware loader can result in kernel‑memory corruption.1dCVE-2026-48186—3.4%
——1Improper handling of messages before AS security activation can cause unexpected behavior1dCVE-2026-35495—4.2%
——1In IMS stack, improper handling of SIP packets leads to Incorrect_Access_Control vulnerability1dCVE-2025-66368—4.2%
——1Incorrect handling of SDP payload leads to a Denial of Service1d