When upstream breaks, Teire fixes your code.

teire-dev/teire System status

Built on

Product

Scan a repo Changes Install on GitHub Dashboard Demo video

Developers

Docs GitHub CLI and MCP teire.yml schema npm

Trust

How Teire runs Source code

Teire

Changes Scan Docs Trust

← All changes

loofah✕security

loofah: SVG `<textPath>` and `<mpath>` bypass local-reference restriction in Loofah

SVG `<textPath>` and `<mpath>` bypass local-reference restriction in Loofah (moderate). GHSA-345x-3rq2-jfrm.

loofah: SVG `<textPath>` and `<mpath>` bypass local-reference restriction in Loofah: from its source to your code

github.comquote checked
security advisory
Your codeby hand
Nemotron fixes

In its own wordsmatches the page ✓

SVG `<textPath>` and `<mpath>` bypass local-reference restriction in Loofah

github.com/flavorjones/loofah/security/ad…from an advisory databasechecked 2026-11-02#5b1e79f725

What Teire looks for in your code

nothing to search for: checked by hand

Does it reach your code?

Fix in all Scan a repo

read by a advisory-feed · advisory/rubygems/loofah/GHSA-345x-3rq2-jfrm