CyberSecBulletin

Darylldoyle vulnerabilities

We track 2 vulnerabilities in Darylldoyle products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 3, 2026.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Darylldoyle vulnerabilities

  • 7.5 High severity

    svg-sanitizer: Uncontrolled Resource Consumption

    CVE-2026-121444Darylldoyle

    svg-sanitizer from 0.11.0 before 1.1.0 contains an algorithmic complexity denial of service vulnerability in hasInfiniteLoop() and countUse() of the use reference-graph analysis. Attackers can upload a small layered SVG with 15 levels of fanned-out use element

  • 7.5 High severity

    svg-sanitizer: Inefficient Algorithmic Complexity

    CVE-2026-117540Darylldoyle

    svg-sanitizer from 0.5.3 before 1.1.0 contains a denial of service vulnerability in Sanitizer::sanitize() that repeatedly rescans the whole input while stripping PHP tags. Unauthenticated attackers can upload SVGs with many overlapping PHP tag openers and clos