XXE SVG Hostname

Returns an SVG payload with XXE to get files

/sh

attempts to get /etc/hostname

SVG with XXE payloads

Last modified November 28, 2025: pin actions (5230c1e)