{"affected":[{"defaultStatus":"unaffected","product":"svg-sanitizer","source":"CNA: VulnCheck","vendor":"darylldoyle","versions":[{"lessThan":"1.1.1","status":"affected","version":"1.1.0","versionType":"semver"},{"status":"unaffected","version":"1.1.1","versionType":"semver"}]}],"cveId":"CVE-2026-121443","cwes":["CWE-248"],"description":"svg-sanitizer from 1.1.0 before 1.1.1 contains a denial of service vulnerability that allows remote attackers to crash requests by submitting SVG input ending inside an unclosed tag. Attackers can upload truncated input like a single '<' to trigger an uncaught ValueError from strpos() in hasElementWithTooManyAttributes() or hasInternalDtdSubset() on PHP 8, failing the request.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.9,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0"},{"score":5.3,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"}],"modifiedAt":1793716113308,"publishedAt":1793716113308,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-f7cw-vfxq-7ph2"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/svg-sanitizer-from-1.1.0-before-1.1.1-denial-of-service-via-unclosed-tag"}],"remediation":[],"revision":"ed29fe5f4db030ecba5cdc2478d9ca9b2f442c35a768d7c8d88e8687cad42854","sources":[{"modifiedAt":1793716113308,"name":"CNA: VulnCheck","retrievedAt":1793718596009,"url":"https://www.cve.org/CVERecord?id=CVE-2026-121443"}],"ssvc":null,"status":"published","title":"svg-sanitizer from 1.1.0 before 1.1.1 Denial of Service via Unclosed Tag","updatedAt":1793718596009}