CVE-2026-107379

savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer allows a crafted SVG DTD with a #FIXED attribute default to make cleanAttributesOnWhitelist() perform a double DOMElement::removeAttribute() call on the same attribute name in src/Sanitizer.php. The first removal deletes the explicit attribute, while the DTD default rematerializes the value before the href safety path performs the second removal, which can corrupt libxml state and terminate the PHP worker. An attacker who can submit SVG content to a sanitization endpoint can repeatedly interrupt workers and degrade or exhaust application availability. This issue is fixed in version 1.0.0.

• CWE-770

• https://github.com/darylldoyle/svg-sanitizer/commit/23877db7e76f1e1df5c3e65ab30239219c3d2867
• https://github.com/darylldoyle/svg-sanitizer/releases/tag/1.0.0
• https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-v383-3rw5-q8rf
• https://github.com/darylldoyle/svg-sanitizer/security/advisories/GHSA-v383-3rw5-q8rf

Published

Oct 8, 2026

Last Modified

Oct 9, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-107363In OpenStack Zaqar before 23.0.1, the WebSocket transport fa…6.1
• CVE-2026-10737The SP Project & Document Manager plugin for WordPress is vu…7.5
• CVE-2026-107375JHipster is a development platform to quickly generate, deve…8.8
• CVE-2026-107376webonyx graphql-php is a PHP implementation of the GraphQL s…8.2
• CVE-2026-107377datamodel-code-generator generates Python data models from s…7.5
• CVE-2026-107378CairoSVG is an SVG converter based on Cairo, a 2D graphics l…8.7
• CVE-2026-10738The jQuery Hover Footnotes plugin for WordPress is vulnerabl…6.4
• CVE-2026-107380savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, s…5.4
• CVE-2026-107382MariaDB Connector/Node.js is used to connect applications de…5.9
• CVE-2026-107383MariaDB Connector/Node.js is used to connect applications de…7.5
• CVE-2026-107384MariaDB Connector/Node.js is used to connect applications de…8.1
• CVE-2026-107385MariaDB Connector/Node.js is used to connect applications de…7.4