CVE-2023-28426

Publication date 20 March 2023

Last updated 4 August 2025

Ubuntu priority

Medium

Why this priority?

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: GHSA-xrqq-wqh4-5hg2. Reason: Further investigation showed that this CVE was assigned in error. Notes: See https://github.com/darylldoyle/svg-sanitizer/issues/88 for a technical discussion.

Read the notes from the security team

Status

Package Ubuntu Release Status
spip 22.10 kinetic Ignored end of life, was needs-triage
22.04 LTS jammy
Not affected
20.04 LTS focal
Not affected
18.04 LTS bionic
Not affected
16.04 LTS xenial
Not affected
14.04 LTS trusty Ignored end of standard support

Notes

ccdm94

spip includes an embedded copy of svg-sanitizer.