[HIGH] XSS in enshrined/svg-sanitize due to mishandled script and data values in attributes

PKSA-kv5d-dmjs-n5mp CVE-2019-18857 GHSA-gf8j-v8x5-h9qp

Affected package: enshrined/svg-sanitize

Affected version: <0.12.0

Reported by:
GitHub