CVE-2025-56514: Fiora chat user avatar is vulnerable to XSS via SVG files
N/A
CVSS Score
Basic Information
CVE ID
GHSA ID
EPSS Score
-
CWE
Published
10/1/2025
Updated
10/1/2025
KEV Status
No
Technology
JavaScript
Technical Details
CVSS Vector
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| fiora | npm | = 1.0.0 |