CVE-2022-24718

Name of the Vulnerable Software and Affected Versions ssr-pages versions prior to 0.1.4

Description ssr-pages is an HTML page builder for the purpose of server-side rendering (SSR). A path traversal issue can occur when providing untrusted input to the svg property as an argument to the build(MessagePageOptions) function.

Recommendations For versions prior to 0.1.4, update to version 0.1.4 to resolve the issue. As a temporary workaround, consider restricting the input to the svg property to prevent untrusted data from being passed to the build(MessagePageOptions) function.