Aller au contenu
en Se connecter
5.7 Moyenne

CVE-2021-21236 CairoSVG is a Python (pypi) package

Description

CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information.

Produits et versions touchés

Produit Versions touchées Corrigé en
CairoSVG 2.5 premières → < 2.5.1 2.5.1

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de CairoSVG

Les 4 CVE de CairoSVG →
CVE-2026-107378 CairoSVG is an SVG converter based on Cairo, a 2D graphics library 8.7 Élevée CVE-2026-31899 CairoSVG is an SVG converter based on Cairo, a 2D graphics library 7.5 Élevée CVE-2023-27586 CairoSVG is an SVG converter based on Cairo, a 2D graphics library 9.9 Critique
Suivre cette CVE