svg2png 4.1.1 allows XSS with resultant SSRF via JavaScript inside an SVG document.
svg2png project svg2png 4.1.1