Regular Expression Denial of Service in IS-SVG Affects Multiple Versions
CVE-2021-29059

7.5HIGH

Key Information:

Vendor: Is-svg Project
Status: Is-svg
Vendor: CVE Published:; 21 June 2021

🔔 Create Is-svg Project Vulnerability Alert

What is CVE-2021-29059?

A vulnerability exists in IS-SVG, versions 2.1.0 to 4.2.2 and below, which can be exploited when an application processes a maliciously crafted SVG string. This results in a Regular Expression Denial of Service (ReDOS), potentially overwhelming the system and leading to degraded performance. Developers using IS-SVG should ensure they are utilizing versions above 4.2.2 to mitigate this risk and enhance application security.