A denial of service issue exists where remote attackers can crash requests by submitting SVG input that ends inside an unclosed tag. On PHP 8, uploading truncated input, such as a single '<', triggers an uncaught ValueError from the `strpos()` function within `hasElementWithTooManyAttributes()` or `hasInternalDtdSubset()`, causing the request to fail.