CVE-2019-18856

score

<0.1

cvss

7.5

epss

1.4%

published

2019-11-11

kev added

—

first seen

2026-10-21

Drupal 8.x-1.0-alpha1 contains a denial_of_service caused by mishandling access to external resources with SVG use element in SVG Sanitizer module, letting attackers cause service disruption, exploit requires access to the vulnerable module.