CVE-2023-46035

The svg_optimizer gem before 0.3.0 for Ruby performs entity expansion on untrusted documents.

Published Sep 14, 2026
CVSS 5.9 medium
0.4% chance of exploitation in the next 30 days (EPSS)
A fix is available

Affected software

Fnando Svg Optimizer

CVE-2023-46035 at the National Vulnerability Database