#svg
-
Pele: Mermaid Diagrams as Themeable SVG
Pele is a lightweight open-source library that turns Mermaid text into SVG and lets you recolor diagrams through CSS variables — with no re-rendering.
-
Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws
On October 14 Vercel fixed two critical remote-code-execution flaws — in React Server Components and in the librsvg library — plus a high-severity denial-of-service bug.
-
Critical Next.js flaw: server code execution via a crafted SVG
ImageResponse, the feature that generates social preview images, can under certain conditions let an attacker run code on the server. Vercel shipped a fix on September 22.
-
An SVG image ran commands with SYSTEM privileges on Bing Images servers
A specially crafted SVG file submitted to Bing image search executed arbitrary commands on Microsoft's servers — as root on Linux and NT AUTHORITY\SYSTEM on Windows. Microsoft closed both vulnerabilities on its side before disclosure.