Known Vulnerabilities for Safe SVG by 10up
Listed below are 3 of the newest known vulnerabilities associated with "Safe SVG" by "10up".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110284 json | The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Local File Inclusion ... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-108953 json | mac-shell-mcp before 2.0.0 contains an OS command injection vulnerability that allows MCP clients to bypass the command white... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108258 json | Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-107734 json | SumatraPDF is a multi-format reader for Windows. In 3.5.2 and earlier, an attacker-controlled SyncTeX source filename is subs... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-107380 json | savg-sanitizer is a PHP SVG/XML sanitizer. Prior to 1.0.0, svg-sanitizer's isHrefSafeValue() validates an SVG href after XML ... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-107335 json | Malcolm's upload-processing pipeline (scripts/safe-extract.py) enforces entry-count, nesting-depth, and total-uncompressed-by... | Not Provided | 2026-10-08 | 2026-10-13 |
| CVE-2026-105812 json | Improper control of code generation in the agent import functionality of Amazon Bedrock AgentCore Starter Toolkit before 0.3.... | Not Provided | 2026-10-06 | 2026-10-07 |
| CVE-2026-105795 json | Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_seman... | Not Provided | 2026-10-06 | 2026-10-06 |
| CVE-2026-105274 json | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in hexpm hex_core allows an untrusted reposito... | Not Provided | 2026-10-12 | 2026-10-15 |
| CVE-2026-105261 json | The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories WordPress plug... | Not Provided | 2026-10-14 | 2026-10-14 |