AIKIDO-2026-567228
satori is vulnerable to SVG Injection
53
CVE Score
Medium
SVG Injection
TL;DR
The SVG serializer in satori includes certain values in generated markup without properly escaping them. Crafted input can therefore be interpreted as SVG elements, attributes, or styles instead of text. Downstream consumers of that SVG then treat the injected markup as part of the document, so the impact depends on how the SVG is consumed. The fix hardens SVG serialization.
How do I fix this?
Upgrade the satori library to the patch version.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and your application renders attacker-controlled content with satori.
Package
Versions
0.0.27 - 0.33.4
Fixed in 0.33.5Background info
satori is vulnerable to SVG Injection in versions 0.0.27 - 0.33.4.
Links
CVE Details
GitHub Release
Fix Commits
github.com/vercel/next.js/commit/868fad38690d72088868f299fa2bef339b26838egithub.com/vercel/satori/commit/26a52affc031216fee5882b6e965c8dbc7ac1782
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.