CVE-2026-68921 dicebear CVE debrief

Who should care

Developers using @dicebear/core and @dicebear/initials versions prior to 9.4.3 should be aware of this vulnerability and take steps to mitigate it. Applications that pass untrusted values into these normally developer-controlled options are particularly at risk. Additionally, operators, platforms, vulnerability-management teams, and security teams should review the affected product deployments and take necessary actions to prevent exploitation.

Technical summary

The @dicebear/core and @dicebear/initials libraries prior to version 9.4.3 are vulnerable to SVG injection attacks. The issue arises from the lack of XML escaping in the addRotate function of @dicebear/core and the emission of fontSize and fontWeight without escaping in @dicebear/initials. An attacker can inject arbitrary SVG markup, potentially leading to script execution in the page origin when the generated avatar is inserted inline or served as image/svg+xml and opened directly. Developers should prioritize updating to @dicebear/core and @dicebear/initials version 9.4.3 or later to address the SVG injection vulnerability.

Defensive priority

Developers should prioritize updating to @dicebear/core and @dicebear/initials version 9.4.3 or later to address the SVG injection vulnerability.

Recommended defensive actions

• Update to @dicebear/core and @dicebear/initials version 9.4.3 or later
• Review and validate user input for SVG-related options
• Implement additional security measures to prevent SVG injection attacks
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

Evidence from the NVD and CVE.org indicates that @dicebear/core and @dicebear/initials versions prior to 9.4.3 are vulnerable to SVG injection attacks. The issue is fixed in version 9.4.3. Further review of the source code and affected product deployments is necessary to determine the full scope of the vulnerability. Defenders should verify that their applications do not pass untrusted values into these normally developer-controlled options and take steps to mitigate the vulnerability.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.