4.2.2

DATE	CVE	VULNERABILITY TITLE	RISK
2021-06-21	CVE-2021-29059	Allocation of Resources Without Limits or Throttling vulnerability in Is-Svg Project Is-Svg A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if the application is provided and checks a crafted invalid SVG string. network low complexity is-svg-project CWE-770	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.