Scratch has a history of SVG-related vulnerabilities due to the parsing of user-generated content into an <svg> element, which is appended to the main document. This operation poses inherent security risks, leading Scratch to implement increasingly complex sanitization methods.