Directory Traversal
CVE-2021-23631

7.5HIGH

Key Information:

Vendor: Convert-svg-core Project
Status: Convert-svg-core; Convert-svg-to-png; Convert-svg-to-jpeg
Vendor: CVE Published:; 21 January 2022

🔔 Create Convert-svg-core Project Vulnerability Alert

What is CVE-2021-23631?

This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a converted PNG file.