보통취약점 권고JavaScript / Node.js2026. 10. 27. 오후 11:46

Satori-generated SVG has improper escaping

影響: npm:satori >= 0.0.27, < 0.33.5 → 0.33.5

Satori does not properly escape certain values before including them in generated SVG output. This can allow crafted values to be interpreted as SVG markup. The impact depends on how the generated SVG is consumed. Workaround No complete workaround exists besides upgrading. Applications that cannot immediately upgrade should not render attacker-controlled content with Satori.

GitHub Advisory Database에서 읽기

CVE	CVE-2026-94545
정보원	GitHub Advisory Database
수집 시각	2026. 10. 28. 오전 06:03
데이터	Markdown　JSON

2026. 10. 27. 오후 11:46, GitHub Advisory Database에서 "Satori-generated SVG has improper escaping"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "보통"(medium)입니다. 관련 기술: JavaScript / Node.js. CVE: CVE-2026-94545.