Project

General

Profile

Actions
Copy link

Task #100233

closed

Upgrade enshrined/svg-sanitize to ^0.16

Added by J. Peter M. Schuler over 1 year ago. Updated over 1 year ago.

Status:
Rejected
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2023-03-20
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Sprint Focus:

Description

The current dependency of enshrined/svg-sanitize:^0.15.4 is marked insecure: https://github.com/advisories/GHSA-xrqq-wqh4-5hg2
As 0.15.4 is the last 0.15.x and SemVer dictates to treat ^0.15 as a major, the dependency needs to be raised to ^0.16.0 to allow installation of a secure version.

Related issues 3 (0 open — 3 closed)

Related to TYPO3 Core - Bug #96901: Upgrade enshrined/svg-sanitize to ^0.15Closed2022-02-15

Actions
Related to TYPO3 Core - Bug #100234: Incorporate tests of enshrined/svg-sanitize:v0.16.0RejectedOliver Hader2023-03-21

Actions
Related to TYPO3 Core - Task #103722: Detected vulnerability with package 'enshrined/svg-sanitize' Closed2024-04-25

Actions
Actions
Copy link

Also available in: Atom PDF