01 Record

CVE-2026-73650

SVGO: removeScripts plugin leaves some executable scripts intact

HighPUBLISHEDCNA: GitHub_M

Base score8.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N

02 Description

SVGO: removeScripts plugin leaves some executable scripts intact

Published: 2026-08-13 18:08Z1 DAY AGO
Last updated: 2026-08-13 18:08Z1 DAY AGO
Reserved: 2026-08-13
Assigning CNA: GitHub_M
Record state: PUBLISHED
Severity: High (CVSS 8.2)
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
Weaknesses: CWE-79 CWE-184
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: dea9e9404371fc5696d0c72d6987c85718e841e98e582f542255b896e67061e0

VendorProductVersionsPlatforms

svgsvgo>= 1.0.0, < 2.8.3, >= 3.0.0, < 3.3.4, >= 4.0.0, < 4.0.2—