CVE-2026-29074 | svgo up to 2.8.0/3.3.2/4.0.0 SVG File Parser xml entity expansion

A vulnerability classified as problematic was found in svgo up to 2.8.0/3.3.2/4.0.0. Affected by this vulnerability is an unknown functionality of the component SVG File Parser. Executing a manipulation can lead to xml entity expansion.

This vulnerability is handled as CVE-2026-29074. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.