CVE-2025-10728CWE-674
CVE-2025-10728
published October 3, 2025
What it is
When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading to stack overflow DoS
The record
Technical detail
- CVSS
- 9.4 · NONE
- CVSS v4.0
- Not supplied
- EPSS
- 0.00218 · 11.6th percentile
- Weakness
- CWE-674 · Uncontrolled Recursion
- Published
- 2025-10-03T20:16Z
References (1)
EPSS history
Timeline