yeah except the third party font issue is a known vulnerability and there isn't one for svg's.